CVE-2026-53395

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4_create nfsd4_create() steals create->cr_dpacl/cr_pacl into the local nfsd_attrs via the designated initializer, then immediately sets the source pointers to NULL. The subsequent conflict guard tests the already-nilled source fields, making it permanently dead code: if (create->cr_acl) { if (create->cr_dpacl || create->cr_pacl) /* always false */ When a client encodes both FATTR4_WORD0_ACL and FATTR4_WORD2_POSIX_{DEFAULT,ACCESS}_ACL in the same CREATE fattr bitmap, nfsd4_acl_to_attr() overwrites attrs.na_pacl/na_dpacl without releasing the originals, leaking two posix_acl slab objects per request. Repeated requests cause unbounded slab exhaustion. Fix by checking attrs.na_dpacl/na_pacl (the stolen values) instead of the nilled create->cr_dpacl/cr_pacl, matching the correct pattern already used in nfsd4_setattr().

• CWE-674

• https://git.kernel.org/stable/c/8371cc5c0a2cc2a71b3dcfd47ff1f7fcfc526a5ePatch
• https://git.kernel.org/stable/c/a60f25a800846ab8e5a13f8a9d05111f2aee55a7Patch

Published

Jul 19, 2026

Last Modified

Aug 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5339A vulnerability was detected in Tenda G103 1.0.0.5. The impa…8.8
• CVE-2026-53390In the Linux kernel, the following vulnerability has been re…8.1
• CVE-2026-53391In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-53392In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-53393In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53394In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-53396In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-53397In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-53398In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-53399In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-5340The Fancy Image Show plugin for WordPress is vulnerable to S…6.4
• CVE-2026-53400In the Linux kernel, the following vulnerability has been re…7.8