# CVE-2026-90151

Linux kernel NFSv4 use-after-free in callback handling causing kernel memory corruption.

- Page: https://www.vulneraibility.com/cve/CVE-2026-90151
- CVSS: 9.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.75% (percentile 55.0)
- Published: 2026-09-17

## Affected versions

- Linux: affected >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < 68c721391b761dbe38d5b0094d2bb6e8489ad92b; >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < 9bfdd0f591307b5198826a0e7a5b2f35f87acd2d; >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < 7c4812eb96bdcafb31a65b12f2aa96659429d1d4; >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < fc95ca82d5ae598c428ab5a00ae69f8526d59371; >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < 80b1c3d5a881f7d9081aa9f46da9742878a0f893; >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < 3f2387e8bfbc4efda5d77c3a11a028d0a119c48f; >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < 5891c03e150920618db0e9c4ea2d772abacdcfd1; >= f4eecd5da3422e82e88e36c33cbd2595eebcacb1 and < d05c2007b3d84ccba11dc6e9cb3202768cc72f14; 2.6.38; fixed in < 2.6.38, >= 5.10.270 and <= 5.10.*, >= 5.15.221 and <= 5.15.*, >= 6.1.188 and <= 6.1.*, >= 6.6.157 and <= 6.6.*, >= 6.12.110 and <= 6.12.*, >= 6.18.52 and <= 6.18.*, >= 7.2.6 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Use-after-free in NFSv4 callback can lead to kernel memory corruption, enabling privilege escalation or kernel crash; can be triggered by malicious NFS server or local actions.

## Action

Immediate action required

## Recommendation

Apply vendor kernel updates immediately; avoid mounting untrusted NFSv4 servers.

## References

- [other] https://git.kernel.org/stable/c/68c721391b761dbe38d5b0094d2bb6e8489ad92b
- [other] https://git.kernel.org/stable/c/9bfdd0f591307b5198826a0e7a5b2f35f87acd2d
- [other] https://git.kernel.org/stable/c/7c4812eb96bdcafb31a65b12f2aa96659429d1d4
- [other] https://git.kernel.org/stable/c/fc95ca82d5ae598c428ab5a00ae69f8526d59371
- [other] https://git.kernel.org/stable/c/80b1c3d5a881f7d9081aa9f46da9742878a0f893
- [other] https://git.kernel.org/stable/c/3f2387e8bfbc4efda5d77c3a11a028d0a119c48f
- [other] https://git.kernel.org/stable/c/5891c03e150920618db0e9c4ea2d772abacdcfd1
- [other] https://git.kernel.org/stable/c/d05c2007b3d84ccba11dc6e9cb3202768cc72f14

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.