A vulnerability in the Linux kernel NFS client allows an unauthenticated attacker to trigger a denial of service condition by forcing the server to revoke state delegations.

This is a resource management flaw where the NFS client fails to issue a DELEGRETURN command during specific error flows. This causes the server to believe the client still holds a delegation, leading to a state mismatch and a persistent loop of state revocation warnings.

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk primarily due to the potential for service disruption. Successful exploitation results in a denial of service for affected NFS mounts, as the client becomes trapped in a state manager loop that consumes system resources and degrades network filesystem performance. This can cause significant operational downtime for applications relying on stable NFS storage.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, which incorporates the necessary fix to ensure proper delegation handling.

Proactive Monitoring: Monitor system logs for repeated NFS state manager errors or excessive TEST_STATEID traffic, which may indicate the client is trapped in the revocation loop described.

Compensating Controls: Ensure network traffic between the NFS client and server is restricted to trusted hosts to limit the ability of unauthorized parties to interact with the NFS mount point and trigger the flaw.

Public Exploit Available: Unknown

Given the potential for service instability and the high CVSS severity score, organizations utilizing NFS should prioritize patching their kernel to version 7.2.6 or higher. Testing the patch in a staging environment is advised to ensure compatibility with existing NFS server configurations before rolling out the update to production infrastructure.