CVE-2026-53244
kernel: VFS: fix possible failure to unlock in nfsd4_create_file()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 25, 2026
Updated · October 13, 2026
Description
A flaw was found in the Linux kernel's Network File System Daemon (NFSD) component. When NFSD exports a filesystem utilizing atomic_create, an error during atomic_create() processing can result in nfsd4_create_file() failing to unlock the parent directory. This resource management issue may lead to resource exhaustion, potentially causing a Denial of Service (DoS) for affected systems.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime