CVE-2023-54276
kernel: nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · July 22, 2026
Description
A flaw was identified in the NFS server (nfsd) implementation in the Linux kernel where the initialization of the per-CPU reply_cache_stats counters was relocated incorrectly in the code path. This change can lead to use of uninitialized per-CPU statistical counters during NFS request handling when the relevant net namespace is set up, leading to inconsistent or stale data and potentially unresolved kernel state.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
CWE-665 · Improper Initialization