CVE-2026-63800

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the pNFS component. When the NFS LAYOUT RETURN branch is triggered within the pnfs update layout() function, the system calls pnfs prepare to retry layoutget(lo). If successful, pnfs put layout hdr(lo) is executed before trace pnfs update layout(). Because the tracepoint still references the lo variable, accessing its fields after the header has been released leads to a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.