CVE-2026-53393

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53393", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.402Z", "datePublished": "2026-07-19T12:01:56.684Z", "dateUpdated": "2026-11-06T16:34:23.833Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T04:50:44.847Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: reset write verifier on deferred writeback errors\n\nnfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to\ndetect deferred writeback errors, but neither rotates the server's write\nverifier (nn->writeverf) when this check fails. Every other\ndurable-storage-failure path in these functions calls\ncommit_reset_write_verifier() before returning an error.\n\nThe missing rotation means clients holding UNSTABLE write data under the\ncurrent verifier will COMMIT, receive the unchanged verifier back, and\nconclude their data is durable \u2014 silently dropping data that failed\nwriteback. This violates the UNSTABLE+COMMIT durability contract\n(RFC 1813 \u00a73.3.7, RFC 8881 \u00a718.32).\n\nAdd commit_reset_write_verifier() calls at both filemap_check_wb_err()\nerror sites, matching the pattern used by adjacent error paths in the\nsame functions. The helper already filters -EAGAIN and -ESTALE\ninternally, so the calls are unconditionally safe."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfsd/vfs.c"], "versions": [{"version": "f14816f2f928c560d28ba344af689f56efcd6f55", "lessThan": "b8e5894e56cff70fa245628fe16f0ad6367f8090", "status": "affected", "versionType": "git"}, {"version": "3145fe0ebb16e1715ad541a301bc6675c8375fcd", "lessThan": "bc2baca02ec56da7707a74ed5d340b0a1dff1841", "status": "affected", "versionType": "git"}, {"version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "43b65d2997963e80e8d8d86520bcb1e0751227de", "status": "affected", "versionType": "git"}, {"version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "666e837b247fcadf2d8d508b9b0e49d720393eb4", "status": "affected", "versionType": "git"}, {"version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "1dd664b39774a9c89b72de8e59bf9ef4b3aaff2e", "status": "affected", "versionType": "git"}, {"version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "4367afc119c51e17a616f6908772b7e2c2c4013f", "status": "affected", "versionType": "git"}, {"version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "b027cca33c97354149fcc0ddeede4525c41093cd", "status": "affected", "versionType": "git"}, {"version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "2090b05803faab8a9fa62fbff871007862cac1b7", "status": "affected", "versionType": "git"}, {"version": "5.10.124", "lessThan": "5.10.261", "status": "affected", "versionType": "semver"}, {"version": "5.15.49", "lessThan": "5.15.212", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfsd/vfs.c"], "versions": [{"version": "5.17", "status": "affected"}, {"version": "0", "lessThan": "5.17", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.261", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.212", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.95", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.38", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.3", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.124", "versionEndExcluding": "5.10.261"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.49", "versionEndExcluding": "5.15.212"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "6.12.95"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "6.18.38"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "7.1.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/b8e5894e56cff70fa245628fe16f0ad6367f8090"}, {"url": "https://git.kernel.org/stable/c/bc2baca02ec56da7707a74ed5d340b0a1dff1841"}, {"url": "https://git.kernel.org/stable/c/43b65d2997963e80e8d8d86520bcb1e0751227de"}, {"url": "https://git.kernel.org/stable/c/666e837b247fcadf2d8d508b9b0e49d720393eb4"}, {"url": "https://git.kernel.org/stable/c/1dd664b39774a9c89b72de8e59bf9ef4b3aaff2e"}, {"url": "https://git.kernel.org/stable/c/4367afc119c51e17a616f6908772b7e2c2c4013f"}, {"url": "https://git.kernel.org/stable/c/b027cca33c97354149fcc0ddeede4525c41093cd"}, {"url": "https://git.kernel.org/stable/c/2090b05803faab8a9fa62fbff871007862cac1b7"}], "title": "nfsd: reset write verifier on deferred writeback errors", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-53393", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:28:31.778472Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:34:23.833Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-53393", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:28:31.778472Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:28:33.322Z"}}], "cna": {"title": "nfsd: reset write verifier on deferred writeback errors", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "f14816f2f928c560d28ba344af689f56efcd6f55", "lessThan": "b8e5894e56cff70fa245628fe16f0ad6367f8090", "versionType": "git"}, {"status": "affected", "version": "3145fe0ebb16e1715ad541a301bc6675c8375fcd", "lessThan": "bc2baca02ec56da7707a74ed5d340b0a1dff1841", "versionType": "git"}, {"status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "43b65d2997963e80e8d8d86520bcb1e0751227de", "versionType": "git"}, {"status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "666e837b247fcadf2d8d508b9b0e49d720393eb4", "versionType": "git"}, {"status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "1dd664b39774a9c89b72de8e59bf9ef4b3aaff2e", "versionType": "git"}, {"status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "4367afc119c51e17a616f6908772b7e2c2c4013f", "versionType": "git"}, {"status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "b027cca33c97354149fcc0ddeede4525c41093cd", "versionType": "git"}, {"status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "lessThan": "2090b05803faab8a9fa62fbff871007862cac1b7", "versionType": "git"}, {"status": "affected", "version": "5.10.124", "lessThan": "5.10.261", "versionType": "semver"}, {"status": "affected", "version": "5.15.49", "lessThan": "5.15.212", "versionType": "semver"}], "programFiles": ["fs/nfsd/vfs.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.17"}, {"status": "unaffected", "version": "0", "lessThan": "5.17", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.261", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.212", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.178", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.95", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.38", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.3", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/nfsd/vfs.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/b8e5894e56cff70fa245628fe16f0ad6367f8090"}, {"url": "https://git.kernel.org/stable/c/bc2baca02ec56da7707a74ed5d340b0a1dff1841"}, {"url": "https://git.kernel.org/stable/c/43b65d2997963e80e8d8d86520bcb1e0751227de"}, {"url": "https://git.kernel.org/stable/c/666e837b247fcadf2d8d508b9b0e49d720393eb4"}, {"url": "https://git.kernel.org/stable/c/1dd664b39774a9c89b72de8e59bf9ef4b3aaff2e"}, {"url": "https://git.kernel.org/stable/c/4367afc119c51e17a616f6908772b7e2c2c4013f"}, {"url": "https://git.kernel.org/stable/c/b027cca33c97354149fcc0ddeede4525c41093cd"}, {"url": "https://git.kernel.org/stable/c/2090b05803faab8a9fa62fbff871007862cac1b7"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: reset write verifier on deferred writeback errors\n\nnfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to\ndetect deferred writeback errors, but neither rotates the server's write\nverifier (nn->writeverf) when this check fails. Every other\ndurable-storage-failure path in these functions calls\ncommit_reset_write_verifier() before returning an error.\n\nThe missing rotation means clients holding UNSTABLE write data under the\ncurrent verifier will COMMIT, receive the unchanged verifier back, and\nconclude their data is durable \u2014 silently dropping data that failed\nwriteback. This violates the UNSTABLE+COMMIT durability contract\n(RFC 1813 \u00a73.3.7, RFC 8881 \u00a718.32).\n\nAdd commit_reset_write_verifier() calls at both filemap_check_wb_err()\nerror sites, matching the pattern used by adjacent error paths in the\nsame functions. The helper already filters -EAGAIN and -ESTALE\ninternally, so the calls are unconditionally safe."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.261", "versionStartIncluding": "5.10.124"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.212", "versionStartIncluding": "5.15.49"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.178", "versionStartIncluding": "5.17"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.145", "versionStartIncluding": "5.17"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.95", "versionStartIncluding": "5.17"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.38", "versionStartIncluding": "5.17"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1.3", "versionStartIncluding": "5.17"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.2", "versionStartIncluding": "5.17"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T04:50:44.847Z"}}}, "cveMetadata": {"cveId": "CVE-2026-53393", "state": "PUBLISHED", "dateUpdated": "2026-11-06T16:34:23.833Z", "dateReserved": "2026-06-09T07:44:35.402Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-07-19T12:01:56.684Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/nfsd/vfs.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "b8e5894e56cff70fa245628fe16f0ad6367f8090", "status": "affected", "version": "f14816f2f928c560d28ba344af689f56efcd6f55", "versionType": "git"}, {"lessThan": "bc2baca02ec56da7707a74ed5d340b0a1dff1841", "status": "affected", "version": "3145fe0ebb16e1715ad541a301bc6675c8375fcd", "versionType": "git"}, {"lessThan": "43b65d2997963e80e8d8d86520bcb1e0751227de", "status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "versionType": "git"}, {"lessThan": "666e837b247fcadf2d8d508b9b0e49d720393eb4", "status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "versionType": "git"}, {"lessThan": "1dd664b39774a9c89b72de8e59bf9ef4b3aaff2e", "status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "versionType": "git"}, {"lessThan": "4367afc119c51e17a616f6908772b7e2c2c4013f", "status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "versionType": "git"}, {"lessThan": "b027cca33c97354149fcc0ddeede4525c41093cd", "status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "versionType": "git"}, {"lessThan": "2090b05803faab8a9fa62fbff871007862cac1b7", "status": "affected", "version": "555dbf1a9aac6d3150c8b52fa35f768a692f4eeb", "versionType": "git"}, {"lessThan": "5.10.261", "status": "affected", "version": "5.10.124", "versionType": "semver"}, {"lessThan": "5.15.212", "status": "affected", "version": "5.15.49", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/nfsd/vfs.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.17"}, {"lessThan": "5.17", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.261", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.212", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.95", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.38", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "241E3BC4-46E2-44CD-95EA-423D767BFF94", "versionEndExcluding": "5.10.261", "versionStartIncluding": "5.10.124", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "3E368EF8-E9A4-4321-9289-9ABB21AB4D7F", "versionEndExcluding": "5.15.212", "versionStartIncluding": "5.15.49", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCE8EB1C-BA21-4585-B9DD-EBD770D8C66E", "versionEndExcluding": "6.1.178", "versionStartIncluding": "5.17", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7046B092-F810-4440-ACE6-60218518EECE", "versionEndExcluding": "6.6.145", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E206B86-E0E3-4394-A93F-39F2D50A8AA8", "versionEndExcluding": "6.12.95", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "FA591B28-5D62-449E-BDBE-3C9391BF070A", "versionEndExcluding": "6.18.38", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9526B150-E2B3-4C6F-8AE5-1AF92B75AD9E", "versionEndExcluding": "7.1.3", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: reset write verifier on deferred writeback errors\n\nnfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to\ndetect deferred writeback errors, but neither rotates the server's write\nverifier (nn->writeverf) when this check fails. Every other\ndurable-storage-failure path in these functions calls\ncommit_reset_write_verifier() before returning an error.\n\nThe missing rotation means clients holding UNSTABLE write data under the\ncurrent verifier will COMMIT, receive the unchanged verifier back, and\nconclude their data is durable \u2014 silently dropping data that failed\nwriteback. This violates the UNSTABLE+COMMIT durability contract\n(RFC 1813 \u00a73.3.7, RFC 8881 \u00a718.32).\n\nAdd commit_reset_write_verifier() calls at both filemap_check_wb_err()\nerror sites, matching the pattern used by adjacent error paths in the\nsame functions. The helper already filters -EAGAIN and -ESTALE\ninternally, so the calls are unconditionally safe."}], "id": "CVE-2026-53393", "lastModified": "2026-11-06T17:18:28.683", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53393", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T16:28:31.778472Z", "version": "2.0.3"}}]}, "published": "2026-07-19T12:16:50.367", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1dd664b39774a9c89b72de8e59bf9ef4b3aaff2e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2090b05803faab8a9fa62fbff871007862cac1b7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4367afc119c51e17a616f6908772b7e2c2c4013f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/43b65d2997963e80e8d8d86520bcb1e0751227de"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/666e837b247fcadf2d8d508b9b0e49d720393eb4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b027cca33c97354149fcc0ddeede4525c41093cd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b8e5894e56cff70fa245628fe16f0ad6367f8090"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bc2baca02ec56da7707a74ed5d340b0a1dff1841"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: nfsd: reset write verifier on deferred writeback errors", "id": "2502220", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502220"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-390", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnfsd: reset write verifier on deferred writeback errors\nnfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to\ndetect deferred writeback errors, but neither rotates the server's write\nverifier (nn->writeverf) when this check fails. Every other\ndurable-storage-failure path in these functions calls\ncommit_reset_write_verifier() before returning an error.\nThe missing rotation means clients holding UNSTABLE write data under the\ncurrent verifier will COMMIT, receive the unchanged verifier back, and\nconclude their data is durable \u2014 silently dropping data that failed\nwriteback. This violates the UNSTABLE+COMMIT durability contract\n(RFC 1813 \u00a73.3.7, RFC 8881 \u00a718.32).\nAdd commit_reset_write_verifier() calls at both filemap_check_wb_err()\nerror sites, matching the pattern used by adjacent error paths in the\nsame functions. The helper already filters -EAGAIN and -ESTALE\ninternally, so the calls are unconditionally safe.", "A flaw was found in the Linux kernel's Network File System (NFS) daemon. This vulnerability occurs when the NFS daemon fails to reset the write verifier during deferred writeback errors for UNSTABLE writes. A remote attacker, acting as an NFS client, could exploit this by performing operations that trigger these errors. This could lead to silent data loss, as clients might incorrectly assume their data has been durably written, violating the NFS durability contract."], "name": "CVE-2026-53393", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "impact": "important", "package_name": "erlang27", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-53393\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53393\nhttps://lore.kernel.org/linux-cve-announce/2026071956-CVE-2026-53393-37ff@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[555dbf1a9aac6d3150c8b52fa35f768a692f4eeb,1dd664b39774a9c89b72de8e59bf9ef4b3aaff2e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[555dbf1a9aac6d3150c8b52fa35f768a692f4eeb,4367afc11974a9c89b72de8e59bf9ef4b3aaff2e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[555dbf1a9aac6d3150c8b52fa35f768a692f4eeb,b027cca33c97354149fcc0ddeede4525c41093cd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[555dbf1a9aac6d3150c8b52fa35f768a692f4eeb,2090b05803faab8a9fa62fbff871007862cac1b7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "f14816f2f928c560d28ba344af689f56efcd6f55"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "3145fe0ebb16e1715ad541a301bc6675c8375fcd"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.10.124,5.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.15.49,5.16)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.17"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.17)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.95,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.38,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.3,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T13:00:03.986794+00:00", "updated": "2026-08-12T10:00:01.828010+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}