Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-90148

NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() When nfs4_add_lease() races with a delegation return, it calls nfs4_delete_lease() to clean up. Previously, it passed priv, which can legitimately be NULL. Passing a NULL priv eventually leads to a NULL pointer dereference in generic_setlease().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e93a5e9306a576011f03011b492d4fbaa274477b to < e25e5b4a764638ec9e2dc6c9affe080c922ea1f2affected
  • e93a5e9306a576011f03011b492d4fbaa274477b to < ff7244faa13b23e9acfad9df0438f0b44b338f62affected
  • e93a5e9306a576011f03011b492d4fbaa274477b to < d148a652d52fd6aee96daf798922eb800ebb3018affected
  • e93a5e9306a576011f03011b492d4fbaa274477b to < d179ff22cd8514f966966fd9ad425dcbb98e1adaaffected
  • e93a5e9306a576011f03011b492d4fbaa274477b to < 468e458ffde907ba19acd2102ca1fbb8f6fbede2affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References