The vulnerability, a case of CWE-1288 (Improper Validation), was introduced by a change to the NFS daemon's handling of NFSEXP_PNFS in the netlink codepath. The logic that verifies block layout parameters was moved from an internal helper to the callers, but the patch failed to account for a new call in the helper. As a result, NFS clients can send malformed NFSEXP_PNFS messages that bypass layout validation, potentially causing the daemon to process incorrect data or crash.

All Linux kernel versions that contain the NFS daemon and have not applied the patch, typically kernel releases prior to the commit that introduced the fix. The references point to two kernel commits that correct the issue. Because the affected code resides in the core kernel, the impact applies to any distribution shipping the vulnerable kernel.

The flaw does not involve direct buffer overflows or code execution, but it removes a critical validation step, making the NFS daemon vulnerable to denial‑of‑service attacks from remote clients that speak the NFS protocol. The CVSS score is 7.0. The EPSS score is < 1% (approximately 0.00162), indicating a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, but the missing check means the risk is high if the NFS daemon is reachable over the network. The likely attack vector is a crafted NFS request sent over a network to a running NFS server.