news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-23053

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
5.3 Medium
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.17%
Risk score
3.3
Published
2026-02-04
Status
Published

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a deadlock involving nfs_release_folio() Wang Zhaolong reports a deadlock involving NFSv4.1 state recovery waiting on kthreadd, which is attempting to reclaim memory by calling nfs_release_folio(). The latter cannot make progress due to state recovery being needed. It seems that the only safe thing to do here is to kick off a writeback of the folio, without waiting for completion, or else kicking off an asynchronous commit. A flaw was found in the Linux kernel. An NFSv4.1 client can experience a deadlock during memory reclaim. This occurs when state recovery waits on kthreadd while kthreadd attempts to reclaim memory by calling nfs_release_folio(), leading to a circular dependency. A local user can trigger this condition by initiating page cache activity on an NFS mount, resulting in hung tasks, system-wide stalls, and a Denial of Service (DoS).

Weaknesses

CWE-400

Coverage 3

Advisories and references