CVE-2026-64519: NFSD: Fix infinite loop in layout state revocation
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix infinite loop in layout state revocation
findonesbstid() skips stids whose scstatus is non-zero, but the SCTYPELAYOUT case in nfsd4revokestates() never sets scstatus before calling nfsd4closelayout(). The retry loop therefore finds the same layout stid on every iteration, hanging the revoker indefinitely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64519?
CVE-2026-64519 has a risk rating of 37, indicating potential impact on system operation.
How do I fix CVE-2026-64519?
To fix CVE-2026-64519, update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2026-64519?
CVE-2026-64519 affects the Linux kernel, particularly its handling of layout state revocation in NFSD.
What type of vulnerability is CVE-2026-64519?
CVE-2026-64519 is categorized as a logic flaw leading to an infinite loop under specific conditions in the NFSD module.
When was CVE-2026-64519 published?
CVE-2026-64519 was published on July 25, 2026.