CVE-2026-64519: NFSD: Fix infinite loop in layout state revocation

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-25 · updated 2026-07-25

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation find_one_sb_stid() skips stids whose sc_status is non-zero, but the SC_TYPE_LAYOUT case in nfsd4_revoke_states() never sets sc_status before calling nfsd4_close_layout(). The retry loop therefore finds the same layout stid on every iteration, hanging the revoker indefinitely.

Affected products

Linux kernel: 6.9 — fixed in 7.1

How to fix

Upgrade to a fixed version: Linux kernel 7.1. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/44e5e4eb3a07bf3e1d931dd9f96f3edcfa376605
https://git.kernel.org/stable/c/4f8ef58c10bfe5f86a643c7c8331b37e69e3dae1
https://git.kernel.org/stable/c/d1fc00ec02e9deb3f8d2bd59caf938c554fbc576
https://git.kernel.org/stable/c/fe59ae27d7346245f5d8d97220f374e63efd28b5

Get alerted when CVE-2026-64519 or the next vulnerability affects your stack