The Linux kernel's NFS server implementation for NFSACL v2 SETACL requests improperly handles the argument pointers for access and default ACLs. Specifically, nfsaclsvc_decode_setaclargs() sets pointers only when corresponding mask bits (NFS_ACL or NFS_DFACL) are set, leaving others NULL. However, nfsacld_proc_setacl() passes these pointers unconditionally to set_posix_acl(), where a NULL pointer triggers ACL removal. Consequently, a SETACL request that omits the default ACL pointer or has a zero mask unintentionally deletes ACLs. The fix applies gating logic to set_posix_acl() calls based on mask bits and initializes error to zero, ensuring requests without relevant bits do not alter on-disk ACLs.

The vulnerability can cause unintended removal of directory default ACLs when processing NFSACL v2 SETACL requests, potentially leading to loss of intended access control settings on directories. This could affect system security by altering permissions unexpectedly. There is no indication of remote code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to gate calls to set_posix_acl() based on the mask bits in the SETACL request and to initialize error handling properly. Users should apply the official kernel update that includes this fix. No additional mitigation steps are indicated or necessary beyond applying the patch.