> CVE-2026-63800

« BACK_TO_HOME
PUBLISHED
2026-07-19 12:16
MODIFIED
2026-07-19 12:16
EPSS (Prob. Exploit)
0.53%
Top 56.1%
DATA SOURCES:
NVD 🔗 2026-07-19 RED HAT 🔗 2026-07-26 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-26 MSRC 🔗 2026-11-02

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layout(), the code calls pnfs_prepare_to_retry_layoutget(lo). If it succeeds, pnfs_put_layout_hdr(lo) is called before trace_pnfs_update_layout(), which still references 'lo'. This results in a use-after-free when the tracepoint accesses lo's fields. Fix this by moving the tracepoint call before pnfs_put_layout_hdr(lo).

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (...
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

pNFS: Fix use-after-free in pnfs_update_layout()

AFFECTED PACKAGES:
Unknown / Unknown
951 versions affected
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
19/07/2026 12:16
Source: NVD
📊 ENRICHISSEMENT 26/07/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 26/07/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 2 Dernière mise à jour: 3 months ago

> REFERENCES

https://git.kernel.org/stable/c/13e198a90ca4050f4bee8a3f23680389a6563ccc
https://git.kernel.org/stable/c/1f24b8302c77dcaf79c64c073877a3b9f4dd25d2
https://git.kernel.org/stable/c/200e7637f4d6a1342987045eea72641524f909dc
https://git.kernel.org/stable/c/2883ddd7542b4437a2ab4908fe2773f690e20889
https://git.kernel.org/stable/c/4ad8b9a85dbf57ca532ee9e65ad7e6498bfbbf98
https://git.kernel.org/stable/c/7e37e9b3e82ade881e1798e2f4fcc54aff7793c1
https://git.kernel.org/stable/c/9645aaf689aff57427ece3b9fa47d5b5399417f4
https://git.kernel.org/stable/c/9c0fb5c09ae5bd68dc0038692af8127029cb0385
« BACK_TO_HOME