CVE-2026-53398

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-53398

Key Details

CVE	CVE-2026-53398
CVSS Score / Version	9.8 (Critical) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix SECINFO_NO_NAME decode error cleanup

nfsd4_decode_secinfo_no_name() currently initializes sin_exp after

decoding sin_style. If the XDR stream is truncated, the decoder returns

nfserr_bad_xdr before sin_exp is initialized.

Since commit 3fdc54646234 ("NFSD: Reduce amount of struct

nfsd4_compoundargs that needs clearing"), the inline iops array is not

cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore

leave sin_exp holding stale union contents from a previous operation.

The error response path still invokes nfsd4_secinfo_no_name_release(),

which calls exp_put() on a non-NULL sin_exp.

Initialize sin_exp before the first failable decode step, matching

nfsd4_decode_secinfo(). (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-53398
CVE	https://www.cve.org/CVERecord?id=CVE-2026-53398

Source

Reference

NVD

CVE