CVE-2026-90104

Summary

This flaw in the Linux kernel's NFSv4.1 implementation allows an attacker to cause a kernel memory corruption by passing a zero-length referring call list, leading to potential denial of service or exploitation of vulnerabilities in the kernel.

Exploitability

Exploitation is moderately difficult as it requires crafting a specific input to trigger the vulnerability, and the attacker must have network access to the affected system.

Blast radius

If exploited, the impact could be severe, potentially leading to a denial of service or further kernel-level attacks, depending on the system's configuration and the presence of other vulnerabilities.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the specific version 5.10.100 or later, as published in the advisory.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.