A race condition in the Linux kernel NFSv4 implementation allows unauthenticated remote attackers to cause a denial of service through server crashes.

The vulnerability exists in the nfsd subsystem due to improper synchronization during the initialization of cpntf states. An unauthenticated attacker can trigger a race condition via a crafted OFFLOAD_CANCEL request, leading to a null pointer dereference and subsequent kernel panic.

Successful exploitation of this vulnerability results in a denial of service, forcing the Linux server to crash. Given that NFS is a critical service for file sharing and storage infrastructures, this outage can disrupt business operations, lead to data unavailability, and require manual intervention to restore services. The CVSS score of 7.5 reflects the high impact on availability, even though confidentiality and integrity remain unaffected.

Immediate Action: Update the Linux kernel to the versions specified in the enrichment data: 5.10.270, 5.15.221, 6.1.188, or 6.6.157, depending on the current branch in use.

Proactive Monitoring: Monitor server logs for repeated kernel panics or unexpected nfsd service restarts, which may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, restrict access to the NFS service to trusted networks only and implement firewall rules to block suspicious traffic patterns targeting NFSv4.2 endpoints.

Public Exploit Available: No

The risk posed by this vulnerability is significant for environments relying on NFS for critical storage operations. Administrators should prioritize patching their Linux kernels to the identified fixed versions to prevent potential system crashes and service outages. Immediate testing and deployment of these updates are strongly recommended to ensure stability and resilience against this denial of service vector.