CVE-2026-53397

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the nfsd component when a SETACL decode failure happens. The functions nfsaclsvc decode setaclargs() and nfs3svc decode setaclargs() call nfs stream decode acl() twice to handle NFS ACL and NFS DFACL. If the first call succeeds but the second fails, the decoder returns false, leaving the allocated posix acl in argp->acl access dangling. Because svc process() skips the processing function when decoding fails, the cleanup logic is not reached, causing the posix acl to be leaked for the lifetime of the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.