CVE-2026-98250

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXP_PNFS out of nfsd4_setup_layout_type() and into the callers. That patch didn't account for the new call in nfsd4_setup_layout_type().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98250

EUVD

EUVD-2026-93178

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	da9baa5470dcb077a7c9806f0925c60b530c470b
Linux	Linux	da9baa5470dcb077a7c9806f0925c60b530c470b
Linux	Linux	7.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect handling of the NFSEXP_PNFS flag in the netlink codepath. A patch moved the check for this flag out of nfsd4_setup_layout_type() but failed to account for a new call in that function, leading to improper handling of block layouts.

Detection Guidance

This vulnerability is specific to the Linux kernel's NFS server implementation and does not provide direct detection commands. It involves incorrect handling of the NFSEXP_PNFS flag in the netlink codepath. To detect if your system is affected, check your kernel version against the patched version where this issue is resolved.

Impact Analysis

This vulnerability may cause improper handling of NFS exports with the NFSEXP_PNFS flag, potentially leading to incorrect block layout configurations or denial of service in NFS services.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations. The issue is specific to the Linux kernel's NFSv4 implementation and relates to improper handling of the NFSEXP_PNFS flag in the netlink codepath, which could lead to incorrect layout type setup.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the NFSv4.1+ block layout handling issue. Check your distribution's security advisories for kernel updates addressing CVE-2026-98250.

Hi! I’m here to help you understand CVE-2026-98250. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70