CVE-2026-98250: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-06 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXP_PNFS out of nfsd4_setup_layout_type() and into the callers. That patch didn't account for the new call in nfsd4_setup_layout_type().

Affected products

Linux kernel: 7.2 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/30335038d4e25cf017abb0562f4f4eace4f58f96
https://git.kernel.org/stable/c/f76017a7663c4ce5e379f8a8d39f032bdb1fd865

Get alerted when CVE-2026-98250 or the next vulnerability affects your stack