Threats tagged 'ghsa-q23q-5v8c-h3gr'

A use-after-free vulnerability in the Linux kernel's NFS server (nfsd) was resolved by properly freeing associated copynotify stateids in the nfs4_free_ol_stateid() function. The issue occurs when a parent stateid is freed without freeing its associated copynotify stateids, leading to list corruption and kernel warnings or crashes. This can happen after a client reboot and session recreation, causing internal kernel errors and potential denial of service.