A vulnerability in the Linux kernel NFS implementation allows unauthenticated remote attackers to trigger a kernel panic and system crash through specifically crafted network requests.

The vulnerability exists in the nfsd4_putfh function when CONFIG_NFSD_V4_2_INTER_SSC is enabled. An unauthenticated attacker can send a crafted NFS COMPOUND request that triggers a NULL pointer dereference by bypassing filehandle validation, leading to a kernel crash.

A successful exploit results in a complete denial of service for the affected system, as the kernel will panic when attempting to process the malicious operation. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to availability, particularly for storage servers or high-performance computing environments relying on NFS. Organizations may face unplanned downtime and service interruption if their infrastructure is exposed to untrusted network traffic.

Immediate Action: Update the Linux kernel to the latest stable release in your distribution, ensuring it includes patches for the 5.10.270, 5.15.221, 6.1.188, or 6.6.157 branches.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages associated with nfsd or filesystem operations, which may indicate attempted exploitation.

Compensating Controls: If patching is delayed, restrict access to the NFS service to trusted internal networks only, or disable the NFS v4.2 inter-server copy (SSC) feature if it is not strictly required for business operations.

Public Exploit Available: No confirmed public exploit exists.

This vulnerability represents a significant stability risk for systems utilizing NFS. Administrators should prioritize the deployment of kernel updates provided by their respective Linux distribution vendors to resolve this issue. If immediate patching is not feasible, restricting NFS access to trusted segments is a necessary step to prevent remote exploitation of the kernel.