The vulnerability involves a reference leak in the Linux kernel's nfsd component. When nfsd_set_fh_dentry() processes filehandles decoded by exportfs_decode_fh_raw(), it leaks a dentry reference if the NFS3_FHSIZE or NFS_FHSIZE cases detect NFSEXP_V4ROOT and jump to the out label. The out label calls exp_put() but does not call dput(dentry), and since fhp->fh_dentry is never assigned, fh_put() cannot compensate for the leak. This leak can be triggered by a crafted NFSv3 filehandle targeting a V4ROOT export's fsid, causing the leak on every request.

The vulnerability results in a resource leak (dentry reference leak) in the kernel's NFS daemon when processing certain NFSv3 filehandles. This could lead to increased memory usage or resource exhaustion over time on affected systems, potentially impacting system stability or performance. There is no information about remote code execution or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitoring for unusual resource usage related to nfsd may be prudent. No vendor advisory or patch links are provided in the current data.