CVE-2026-74316

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Network File System server (NFSD) where the nfsd4 drop revoked stid() function lacks a case for SC TYPE LAYOUT. When a client sends a FREE STATEID request for an admin-revoked layout state identifier (stid), the system releases the cl lock and returns without unhashing or releasing the stid. Consequently, the stid persists in the IDR (Integer ID Repository) and on the per-client list until the client is destroyed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.