A race condition within the Linux kernel NFS server can lead to silent data loss, potentially resulting in data integrity issues for users of the Network File System.

The vulnerability exists in the nfsd_copy_file_range function, where an improper sampling sequence of the dst->f_wb_err cursor occurs during asynchronous COPY operations. An unauthenticated remote attacker can trigger this race condition, causing the system to falsely report successful write operations even when underlying writeback errors have occurred.

The primary business impact of this vulnerability is the potential for silent data corruption or loss. Because the system incorrectly signals that data has been durably written, applications may proceed under the assumption of data integrity, leading to significant operational risk and potential loss of critical information. With a CVSS score of 7.5, this high severity flaw warrants immediate attention to maintain the reliability of storage infrastructure.

Immediate Action: Update the Linux kernel to the corrected versions, specifically 6.12.109, 6.18.50, 7.2.4, or later stable releases as provided by your distribution.

Proactive Monitoring: Monitor NFS server logs for anomalies related to copy-offload operations and implement periodic data integrity checksums for sensitive files stored on NFS shares.

Compensating Controls: If immediate patching is not feasible, consider disabling NFS asynchronous copy features or limiting NFS access to trusted networks to reduce the exposure window.

Public Exploit Available: Unknown.

This vulnerability presents a significant risk to data integrity within environments relying on the Linux NFS server implementation. Administrators should prioritize the deployment of the provided kernel patches to ensure that writeback errors are correctly captured and reported. Failure to address this flaw may result in undetected data loss that could be difficult to recover from after the fact.