PT-2026-2611 · Linux+1 · Linux Kernel+1

Published 2026-01-13 · Updated 2026-05-22 · CVE-2025-71090

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel’s Network File System daemon (nfsd) contains a flaw in the nfsd4 add rdaccess to wrdeleg() function. This function improperly manages references to nfsd file objects, leading to a reference leak. Specifically, the function can overwrite existing file pointers without releasing the original reference, and may fail to release references when read access exists. This can result in open conflicts and, ultimately, a bug during server shutdown due to uncleaned nfsd file objects in the cache. The issue occurs because the function unconditionally overwrites fp->fi fds[O RDONLY] with a new nfsd file pointer, potentially orphaning the previous reference. Additionally, the same nfsd file pointer is stored in both fp->fi fds[O RDONLY] and fp->fi rdeleg file with only a single reference, which can prevent the release of the file reference when put deleg file() is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71090

USN-8277-1

USN-8277-2

Affected Products

Linux Kernel

Ubuntu

References · 36

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71090.json · Exploit
• https://ubuntu.com/security/CVE-2025-71088 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31504 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43033 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43077 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71144 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8277-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71090 · Security Note
• https://ubuntu.com/security/CVE-2025-71141 · Vendor Advisory
• https://git.kernel.org/stable/c/c07dc84ed67c5a182273171639bacbbb87c12175 · Patch
• https://ubuntu.com/security/CVE-2025-71139 · Vendor Advisory