CVE Database›Document archive›CVE-2023-54276

CVE-2023-54276

kernel: nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net

Loading…

Severity

Moderate

Red Hat Product Security

5.8

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · July 22, 2026

Description

A flaw was identified in the NFS server (nfsd) implementation in the Linux kernel where the initialization of the per-CPU reply_cache_stats counters was relocated incorrectly in the code path. This change can lead to use of uninitialized per-CPU statistical counters during NFS request handling when the relevant net namespace is set up, leading to inconsistent or stale data and potentially unresolved kernel state.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.8
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-665 · Improper Initialization