A memory corruption vulnerability in the Linux kernel NFS implementation poses a significant risk of unauthorized information disclosure and potential service disruption.

The vulnerability exists in the nfsd4_release_compoundargs function, where failing to reset the operation count (opcnt) after freeing a buffer allows an out-of-bounds read of adjacent slab memory. Successful exploitation requires an authenticated local user with low privileges.

This vulnerability allows an attacker to leak sensitive information from kernel memory, which could include credentials, cryptographic keys, or other restricted data. Given the CVSS score of 7.1, this is classified as a high-severity issue that could facilitate further escalation or compromise of system integrity. While local access is required, the exposure of kernel memory represents a critical failure in system security boundaries.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later to incorporate the official patch.

Proactive Monitoring: Monitor system logs for unusual kernel-related errors or recurring NFS service failures that might indicate attempts to exploit memory management functions.

Compensating Controls: Restrict local access to the system to authorized users only, as the vulnerability requires local execution privileges to trigger the flaw.

Public Exploit Available: Unknown

Organizations running Linux kernel versions within the affected range should prioritize patching as part of their next scheduled maintenance cycle. Because this vulnerability allows for the disclosure of sensitive kernel memory, it poses a severe threat in multi-tenant environments or systems where local user access is permitted. Applying the vendor-provided security updates is the only reliable method to eliminate this exposure.