CVE-2026-43394
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-05-08
Modified: 2026-11-11
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). nfsd_nl_listener_set_doit() uses get_current_cred() without put_cred(). As we can see from other callers, svc_xprt_create_from_sa() does not require the extra refcount. nfsd_nl_listener_set_doit() is always in the process context, sendmsg(), and current->cred does not go away. Let's use current_cred() in nfsd_nl_listener_set_doit().
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 16a471177496c8e04a9793812c187a2c1a2192fa < 02e87ec0bc706cb93fa47b43d18c4d10102c7d54 |
| Linux | Linux | 16a471177496c8e04a9793812c187a2c1a2192fa < 019debe5851d7355bea9ff0248cc317878924d8f |
| Linux | Linux | 16a471177496c8e04a9793812c187a2c1a2192fa < cba413765376bb466035c9160fa3130402971e2c |
| Linux | Linux | 16a471177496c8e04a9793812c187a2c1a2192fa < 92978c83bb4eef55d02a6c990c01c423131eefa7 |
| Linux | Linux | 6.10 |
| linux | linux_kernel | 6.10 – 6.12.78 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |