CVE-2026-53393

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
17/08/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> nfsd: reset write verifier on deferred writeback errors<br /> <br /> nfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to<br /> detect deferred writeback errors, but neither rotates the server&amp;#39;s write<br /> verifier (nn-&gt;writeverf) when this check fails. Every other<br /> durable-storage-failure path in these functions calls<br /> commit_reset_write_verifier() before returning an error.<br /> <br /> The missing rotation means clients holding UNSTABLE write data under the<br /> current verifier will COMMIT, receive the unchanged verifier back, and<br /> conclude their data is durable — silently dropping data that failed<br /> writeback. This violates the UNSTABLE+COMMIT durability contract<br /> (RFC 1813 §3.3.7, RFC 8881 §18.32).<br /> <br /> Add commit_reset_write_verifier() calls at both filemap_check_wb_err()<br /> error sites, matching the pattern used by adjacent error paths in the<br /> same functions. The helper already filters -EAGAIN and -ESTALE<br /> internally, so the calls are unconditionally safe.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.10.124 (including) 5.10.261 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15.49 (including) 5.15.212 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.17 (including) 6.1.178 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.145 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.95 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.18.38 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.1.3 (excluding)