What’s Vulnerable › Vulnerabilities

CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-04 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a deadlock involving nfs_release_folio() Wang Zhaolong reports a deadlock involving NFSv4.1 state recovery waiting on kthreadd, which is attempting to reclaim memory by calling nfs_release_folio(). The latter cannot make progress due to state recovery being needed. It seems that the only safe thing to do here is to kick off a writeback of the folio, without waiting for completion, or else kicking off an asynchronous commit.

Affected products

• Linux kernel: 6.3 — fixed in 6.19

How to fix

Upgrade to a fixed version: Linux kernel 6.19. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/19b4d9ab5e77843eac0429c019470c02f8710b55
• https://git.kernel.org/stable/c/49d352bc263fe4a834233338bfaad31b3109addf
• https://git.kernel.org/stable/c/a4810f8beb0122f032f10735f98d257aa6064f4c
• https://git.kernel.org/stable/c/cce0be6eb4971456b703aaeafd571650d314bcca

Get alerted when CVE-2026-23053 or the next vulnerability affects your stack