CVE-2026-43470

A flaw was found in the Network File System (NFS) implementation within the Linux kernel. When directories and files are created and removed concurrently with the same name, a race condition can occur. This can lead to the system attempting to perform file operations on a directory, resulting in a kernel "oops" and causing a Denial of Service (DoS).

This Moderate severity flaw in the Linux kernel's NFS implementation can lead to a denial of service. It requires a local attacker to perform specific concurrent file and directory operations on an NFS mount, which can trigger a kernel 'oops'. Remote exploitation without prior local access is not possible.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.