CVE-2026-43394
MEDIUM EPSS 2.3%
Published May 8, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Published May 8, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). nfsd_nl_listener_set_doit() uses get_current_cred() without put_cred(). As we can see from other callers, svc_xprt_create_from_sa() does not require the extra refcount. nfsd_nl_listener_set_doit() is always in the process context, sendmsg(), and current->cred does not go away. Let's use current_cred() in nfsd_nl_listener_set_doit().
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
2.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-401
Affected Products 5
References 4
- git.kernel.org https://git.kernel.org/stable/c/019debe5851d7355bea9ff0248cc317878924d8f
- git.kernel.org https://git.kernel.org/stable/c/02e87ec0bc706cb93fa47b43d18c4d10102c7d54
- git.kernel.org https://git.kernel.org/stable/c/92978c83bb4eef55d02a6c990c01c423131eefa7
- git.kernel.org https://git.kernel.org/stable/c/cba413765376bb466035c9160fa3130402971e2c
Remediation
- git.kernel.org https://git.kernel.org/stable/c/019debe5851d7355bea9ff0248cc317878924d8f
- git.kernel.org https://git.kernel.org/stable/c/02e87ec0bc706cb93fa47b43d18c4d10102c7d54
- git.kernel.org https://git.kernel.org/stable/c/92978c83bb4eef55d02a6c990c01c423131eefa7
- git.kernel.org https://git.kernel.org/stable/c/cba413765376bb466035c9160fa3130402971e2c