Skip to main content
CVE-2026-64519VulnerabilityPublished 07/27/2026Updated 09/07/2026

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation find_one_sb_stid() skips… (CVE-2026-64519)

Affects linux-hwe-edgeSource GCVE Database

Severity
Medium

No CVSS score published yet

Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.2% chance of exploitation in 30 days – higher than 5% of CVEs
Patch
Available

What to do

AI-suggested

A patch is available and included in Linux kernel versions 7.0.0 and later. Users should update their Linux kernel packages to the fixed versions as provided by their distribution vendor, such as Ubuntu's linux-image packages version 7.0.0-28.28 and later. After updating, a system reboot is required to apply the fix. Due to ABI changes, third-party kernel modules must be recompiled and reinstalled. No additional mitigation steps are necessary beyond applying the official update.

Affected software

ProductAffectedFixed in
linux-hwe-edgeAffected
  • <7.0.0-28.28
  • <7.0.0-1009.9
  • <7.0.0-1010.10
  • <7.0.0-1008.8
Fixed in–

Description

A vulnerability in the Linux kernel's NFS server daemon (NFSD) caused an infinite loop during layout state revocation due to improper handling of state IDs (stids). This flaw was fixed in Linux kernel versions 7.0.0 and later. The issue could cause the revoker to hang indefinitely, impacting system stability. The vulnerability is rated medium severity. Multiple Linux kernel subsystems had security issues fixed in the same update. Users should update to the fixed kernel versions to resolve this and other vulnerabilities.

References