CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's NFS daemon (nfsd), specifically in the handling of file attribute changes (SETATTR) where the lack of a proper write reference can lead to inconsistent state management during the notification of changes. This oversight could potentially allow unauthorized modifications to file attributes, impacting data integrity and security. System administrators and organizations utilizing Linux-based systems with NFS services should prioritize addressing this vulnerability to mitigate the risk of unauthorized access or data corruption.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry. This causes nfsd_setattr() to skip fh_want_write(), so notify_change() runs without a mount write reference. Add the missing fh_want_write() call after the early fh_verify().