The Linux kernel vulnerability involves the nfsd_file_do_acquire() function potentially using a file returned by dentry_create() that has not been opened. The atomic_open handler can return success without opening the file by calling finish_no_open(), which is unusual but possible. This could lead to nfsd operating on a file without the FMODE_OPENED flag set, which the patch addresses by enforcing the check for FMODE_OPENED before using the file.

The vulnerability could cause the NFS daemon to operate on files that have not been properly opened, which may lead to unexpected behavior or potential security issues related to file handling. However, the description notes this scenario is extremely unlikely due to typical atomic_open handler behavior and locking mechanisms. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to ensure nfsd_file_do_acquire() only uses files that have the FMODE_OPENED flag set, preventing use of non-opened files. Users should apply the official Linux kernel update that includes this fix. Patch status is not explicitly confirmed in the input; check the vendor advisory or Linux kernel release notes for the specific fixed version and update accordingly.