CVE-2026-72472

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue exists in the NFS implementation when traversing the file lock list. The problem occurs because the flc lock is released during iteration in certain functions, which is prohibited to prevent memory corruption. Specifically, the functions nfs delegation claim locks and nfs4 reclaim locks failed to maintain proper protection, and nfs delegation claim locks incorrectly relied on so delegreturn mutex instead of a more comprehensive lock, which is insufficient when a single inode has multiple nfs4 state instances. Additionally, the functions nfs4 locku done() and nfs4 lock done() called locks lock inode wait() without holding the necessary nfsi->rwsem lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.