CVE-2026-31404

A flaw was found in the Linux kernel's Network File System Daemon (NFSD) component. This vulnerability occurs because certain sub-objects are freed prematurely while still being accessed by other parts of the system. A local attacker could potentially trigger a Use-After-Free (UAF) condition, leading to a NULL pointer dereference and causing a system crash, resulting in a Denial of Service (DoS).

This vulnerability affects NFS servers when export cache entries are being cleaned up concurrently with RCU readers accessing export information. The race condition requires specific timing between cache cleanup and /proc/net/rpc/nfsd.export or similar reads. Systems not running NFS server (nfsd) are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.