CVE-2026-63800
Received Received - Intake

Use-After-Free in Linux Kernel pNFS

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layout(), the code calls pnfs_prepare_to_retry_layoutget(lo). If it succeeds, pnfs_put_layout_hdr(lo) is called before trace_pnfs_update_layout(), which still references 'lo'. This results in a use-after-free when the tracepoint accesses lo's fields. Fix this by moving the tracepoint call before pnfs_put_layout_hdr(lo).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63800
EUVD
EUVD-2026-45466

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free vulnerability in the Linux kernel's pNFS (Parallel NFS) implementation. It occurs in the pnfs_update_layout function when handling the NFS_LAYOUT_RETURN branch. The issue arises because a tracepoint still references a freed memory object after it has been released by pnfs_put_layout_hdr.

Detection Guidance

This vulnerability is specific to the Linux kernel's pNFS implementation and requires kernel-level detection. Monitor kernel logs for NFS-related errors or crashes. Check for tracepoint-related warnings in /var/log/kern.log or dmesg output. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could allow an attacker to cause a system crash or potentially execute arbitrary code with kernel privileges. It may lead to denial-of-service conditions or unauthorized access if exploited.

Compliance Impact

This vulnerability is a use-after-free issue in the Linux kernel's pNFS component, which could lead to memory corruption or crashes. It does not directly affect compliance with standards like GDPR or HIPAA, as those focus on data protection and privacy rather than kernel memory management.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for CVE-2026-63800. If immediate patching is not possible, disable pNFS functionality by unmounting NFS shares or disabling the pnfs module. Monitor system stability after applying changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63800. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart