Linux Kernel up to 7.2.7/7.3-rc3 nfsd nfsd4_setup_layout_type input validation

Summaryinfo

A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.7/7.3-rc3. Affected by this issue is the function nfsd4_setup_layout_type of the component nfsd. This manipulation causes input validation. This vulnerability is tracked as CVE-2026-98250. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as very critical was found in Linux Kernel up to 7.2.7/7.3-rc3. Affected by this vulnerability is the function nfsd4_setup_layout_type of the component nfsd. The manipulation with an unknown input leads to a input validation vulnerability. The CWE definition for the vulnerability is CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXP_PNFS out of nfsd4_setup_layout_type() and into the callers. That patch didn't account for the new call in nfsd4_setup_layout_type().

The advisory is shared at git.kernel.org. This vulnerability is known as CVE-2026-98250 since 09/25/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 10/06/2026).

Upgrading to version 7.2.8 or 7.3-rc4 eliminates this vulnerability. Applying the patch 30335038d4e25cf017abb0562f4f4eace4f58f96/f76017a7663c4ce5e379f8a8d39f032bdb1fd865 is able to eliminate this problem. The best possible mitigation is suggested to be upgrading to the latest version.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.2.0
• 7.2.1
• 7.2.2
• 7.2.3
• 7.2.4
• 7.2.5
• 7.2.6
• 7.2.7
• 7.3-rc1
• 7.3-rc2
• 7.3-rc3

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion