A NULL pointer dereference flaw in the Linux kernel NFSv4/flexfiles subsystem allows unauthenticated remote attackers to trigger a system crash and cause a denial of service.

The vulnerability stems from incorrect assumptions in the NFSv4 code paths, where the system expects an NFSv4.0 data server client to possess a session. Because NFSv4.0 does not utilize sessions, the code attempts to dereference a NULL pointer, leading to a kernel oops and subsequent denial of service.

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk due to its potential for system-wide denial of service. Because the flaw can be triggered remotely without authentication, it poses a direct threat to the availability of storage infrastructure, which could result in significant operational disruption and data access outages for business-critical applications relying on NFS.

Immediate Action: Apply the vendor-provided kernel updates to version 6.18.52 or 7.2.6 immediately to resolve the NULL pointer dereference.

Proactive Monitoring: Monitor system logs for kernel oops messages or unexplained service restarts related to NFS processes, which may indicate attempted exploitation.

Compensating Controls: Restrict network access to NFS data servers to trusted subnets or specific IP addresses to limit the ability of unauthorized actors to interact with vulnerable endpoints.

Public Exploit Available: No

This vulnerability represents a significant risk to the stability of Linux-based storage environments. Administrators should prioritize patching the affected kernel versions across all NFS-enabled nodes. Given the ease of triggering a kernel crash from a remote, unauthenticated source, applying the vendor-supplied fix is the only reliable method to eliminate this denial of service risk.