CVE-2026-53396

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The nfsd4 create file() function contains two issues related to Access Control List (ACL) handling. First, the return value of the nfsd4 acl to attr() function is ignored. If the conversion from NFSv4 to POSIX ACL fails, the file is created without an ACL and the client receives a success response, which contradicts RFC 7530/8881 requirements to reject unsupported attributes during creation. Second, a memory leak occurs when start creating() fails after ACL attributes are populated in attrs. In this scenario, the function bypasses nfsd attrs free(), leading to leaked posix acl allocations. This can be triggered by a client using an OPEN(CREATE) request with ACL attributes and an invalid filename.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.