CVE-2026-45983

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the nfsd component where certain operations, such as SETATTR, can trigger idmap lookup upcalls during v4 request compound argument decoding. If these upcall responses are delayed beyond the allowed time limit, the cache check() function marks the request for deferral, causing it to be dropped. This prevents the nfs4svc encode compoundres() function from executing, which leaves the session slot flag NFSD4 SLOT INUSE uncleared. Consequently, subsequent client requests fail with NFSERR JUKEBOX because the slot remains marked as in-use, causing the SEQUENCE operation to fail.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.