CVE-2026-43394
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
08/05/2026
Última modificación:
08/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit().<br />
<br />
nfsd_nl_listener_set_doit() uses get_current_cred() without<br />
put_cred().<br />
<br />
As we can see from other callers, svc_xprt_create_from_sa()<br />
does not require the extra refcount.<br />
<br />
nfsd_nl_listener_set_doit() is always in the process context,<br />
sendmsg(), and current->cred does not go away.<br />
<br />
Let&#39;s use current_cred() in nfsd_nl_listener_set_doit().



