A vulnerability in the Linux kernel NFSv4/pnfs subsystem could allow an unauthenticated remote attacker to cause a system crash by triggering a null pointer dereference.

This is a null pointer dereference vulnerability occurring within the nfs4_pnfs_ds_add function. The flaw exists because the kernel fails to correctly include the NFS version in the data server cache key, leading to a mismatch that results in a system crash when an attacker targets specific NFS device configurations.

The primary risk associated with this vulnerability is a denial of service (DoS), which could render critical storage services unavailable. Given the CVSS score of 7.5, this high severity flaw poses a significant operational risk to environments relying on NFS for data access and storage operations. Unexpected kernel panics can lead to data loss, service interruption, and the need for manual system recovery.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or later, depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel oops or panic events related to the nfs4_pnfs_ds_add function or NFS mounting operations.

Compensating Controls: If immediate patching is not feasible, restrict network access to NFS services to trusted IP addresses only, which reduces the attack surface for this remote vulnerability.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

This vulnerability represents a significant stability risk for production Linux environments utilizing NFS. Administrators should prioritize testing and deploying the provided kernel patches to their stable branches immediately. Given the potential for service disruption, failing to address this flaw could lead to unplanned downtime in critical infrastructure.