CVE Explorer

CVE-2026-53391

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr nfs4_decode_mp_ds_addr() decodes the r_netid and r_addr opaques of a netaddr4 from a GETDEVICEINFO multipath-DS body, then immediately calls strrchr(buf, '.') to locate the port separator. Both decodes use xdr_stream_decode_string_dup(), and the current code checks only "nlen < 0" / "rlen < 0" before dereferencing the returned string. When the on-wire opaque has

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5e2242d28b753cf2df726243a46e04728ef4bba1ed7efd4cb06b9b0e699122e1

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfs/pnfs_nfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"76b94cbd32aacf36a641956385a852635c6802b9","status":"affected","version":"6b7f3cf96364eaf597940cb5c68a682894829915","versionType":"git"},{"lessThan":"c8e4e0c701d0192a2efb6df059c0f9e19678c23d","status":"affected","version":"6b7f3cf96364eaf597940cb5c68a682894829915","versionType":"git"},{"lessThan":"6c344fff2feff9d4d716d8e4ad40e9b5040ee5ea","status":"affected","version":"6b7f3cf96364eaf597940cb5c68a…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfs/pnfs_nfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.0"},{"lessThan":"4.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.211","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.177","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.144","versionType":"semver"},{"lessThanOrEqual…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/012d37a568bfbb2c9686f03ade75560bc7139956"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/30aae62e50b4e074a90a9a5e15246548fbdc1182"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/41fe0f7b84f0cb822ae10ab08592996a592b2a25"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/427ab81a811dab4bca9d19f82eec5847ae42646e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/6c344fff2feff9d4d716d8e4ad40e9b5040ee5ea"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/76b94cbd32aacf36a641956385a852635c6802b9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/c8e4e0c701d0192a2efb6df059c0f9e19678c23d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bb72e5c8de1b67ae7d89526618d8a2309de713247fc325189c6029b0d130138c · sha256:b8aeb6d4e597817f… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer