CVE-2026-53393

nfsd: reset write verifier on deferred writeback errors

State: Published
Severity: Not scored
Published: Jul 19, 2026
Updated: Aug 17, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: reset write verifier on deferred writeback errors

nfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to detect deferred writeback errors, but neither rotates the server's write verifier (nn->writeverf) when this check fails. Every other durable-storage-failure path in these functions calls commit_reset_write_verifier() before returning an error.

The missing rotation means clients holding UNSTABLE write data under the current verifier will COMMIT, receive the unchanged verifier back, and conclude their data is durable — silently dropping data that failed writeback. This violates the UNSTABLE+COMMIT durability contract (RFC 1813 §3.3.7, RFC 8881 §18.32).

Add commit_reset_write_verifier() calls at both filemap_check_wb_err() error sites, matching the pattern used by adjacent error paths in the same functions. The helper already filters -EAGAIN and -ESTALE internally, so the calls are unconditionally safe.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f14816f2f928c560d28ba344af689f56efcd6f55 to before b8e5894e56cff70fa245628fe16f0ad6367f8090Affected 3145fe0ebb16e1715ad541a301bc6675c8375fcd to before bc2baca02ec56da7707a74ed5d340b0a1dff1841Affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 43b65d2997963e80e8d8d86520bcb1e0751227deAffected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 666e837b247fcadf2d8d508b9b0e49d720393eb4Affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 1dd664b39774a9c89b72de8e59bf9ef4b3aaff2eAffected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 4367afc119c51e17a616f6908772b7e2c2c4013fAffected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before b027cca33c97354149fcc0ddeede4525c41093cdAffected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 2090b05803faab8a9fa62fbff871007862cac1b7Affected 5.10.124 to before 5.10.261Affected 5.15.49 to before 5.15.212Affected
LinuxLinux	5.17Affected before 5.17Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.95 through 6.12.Not affected 6.18.38 through 6.18.Not affected 7.1.3 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

f14816f2f928c560d28ba344af689f56efcd6f55 to before b8e5894e56cff70fa245628fe16f0ad6367f8090Affected
3145fe0ebb16e1715ad541a301bc6675c8375fcd to before bc2baca02ec56da7707a74ed5d340b0a1dff1841Affected
555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 43b65d2997963e80e8d8d86520bcb1e0751227deAffected
555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 666e837b247fcadf2d8d508b9b0e49d720393eb4Affected
555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 1dd664b39774a9c89b72de8e59bf9ef4b3aaff2eAffected
555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 4367afc119c51e17a616f6908772b7e2c2c4013fAffected
555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before b027cca33c97354149fcc0ddeede4525c41093cdAffected
555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 2090b05803faab8a9fa62fbff871007862cac1b7Affected
5.10.124 to before 5.10.261Affected
5.15.49 to before 5.15.212Affected

LinuxLinux

5.17Affected
before 5.17Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.95 through 6.12.*Not affected
6.18.38 through 6.18.*Not affected
7.1.3 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.