CVE-2026-53392

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NFSv4 flexfiles implementation where the ff layout alloc lseg() function fails to properly validate the filehandle-version array count decoded from the flexfiles layout body. When a zero count is provided, it is passed to kzalloc objs(), resulting in a ZERO SIZE PTR being stored in dss info->fh versions. Because subsequent flexfiles paths assume at least one filehandle version is present, this leads to a null-pointer dereference, which can cause a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.