An unauthenticated remote memory leak vulnerability in the Linux kernel nfsd subsystem can cause denial of service via unbounded slab exhaustion.

This is a memory leak vulnerability caused by a dead ACL conflict guard in the nfsd4_create function, allowing unauthenticated attackers to trigger resource exhaustion over the network.

Successful exploitation of this vulnerability allows an unauthenticated remote attacker to exhaust kernel slab memory by sending repeated malformed NFS create requests. This leads to system instability and denial of service, impacting server availability. The assigned CVSS score of 7.5 highlights the high severity of network-based availability disruption.

Immediate Action: Update the Linux kernel to version 7.1.3 or later, or apply the official fix commits provided by the vendor.

Proactive Monitoring: Monitor system resource utilization, specifically kernel memory consumption and slab allocation metrics, to detect abnormal growth patterns indicative of exploitation.

Compensating Controls: Implement network-level controls or rate limiting on NFS services to mitigate the velocity of incoming create requests if patching is delayed.

Public Exploit Available: No - unknown

Administrators managing affected Linux kernel environments must prioritize applying the latest stable kernel updates or vendor patches immediately. Securing the NFS subsystem against memory exhaustion prevents potential widespread service outages.