Няма оценка
CVSS
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() When nfs4_add_lease() races with a delegation return, it calls nfs4_delete_lease() to clean up. Previously, it passed priv, which can legitimately be NULL. Passing a NULL priv eventually leads to a NULL pointer dereference in generic_setlease().
Засегнати продукти
- Linux Linux: e93a5e9306a576011f03011b492d4fbaa274477b преди c951b876cccd8a4e21fe8b9712894f6a2513ddbc; e93a5e9306a576011f03011b492d4fbaa274477b преди e25e5b4a764638ec9e2dc6c9affe080c922ea1f2; e93a5e9306a576011f03011b492d4fbaa274477b преди ff7244faa13b23e9acfad9df0438f0b44b338f62; e93a5e9306a576011f03011b492d4fbaa274477b преди d148a652d52fd6aee96daf798922eb800ebb3018; e93a5e9306a576011f03011b492d4fbaa274477b преди d179ff22cd8514f966966fd9ad425dcbb98e1ada; e93a5e9306a576011f03011b492d4fbaa274477b преди 468e458ffde907ba19acd2102ca1fbb8f6fbede2
- Linux Linux: 5.14; преди 5.14; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.110 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък
История
- 17 септември 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-90148
- https://nvd.nist.gov/vuln/detail/CVE-2026-90148
- https://git.kernel.org/stable/c/c951b876cccd8a4e21fe8b9712894f6a2513ddbc
- https://git.kernel.org/stable/c/e25e5b4a764638ec9e2dc6c9affe080c922ea1f2
- https://git.kernel.org/stable/c/ff7244faa13b23e9acfad9df0438f0b44b338f62
- https://git.kernel.org/stable/c/d148a652d52fd6aee96daf798922eb800ebb3018
- https://git.kernel.org/stable/c/d179ff22cd8514f966966fd9ad425dcbb98e1ada
- https://git.kernel.org/stable/c/468e458ffde907ba19acd2102ca1fbb8f6fbede2