CVE-2026-74315

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the lockd component where the file hash() function digests the first LOCKD FH HASH SIZE bytes of nfs fh.data when bucketing nlm files[], regardless of the actual file handle size. In the nlm4svc lookup file() function, only xdr lock->fh.len bytes are copied into lock->fh.data. If an NLMv4 client provides a file handle shorter than LOCKD FH HASH SIZE, the remaining bytes in the buffer retain data from previous requests. This causes the same wire handle to hash to different buckets across different calls, leading the nlm lookup file() function to miss existing nlm file entries and causing lock-state lookups to fail.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.