CVE-2009-1336: fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member t...

Security readout for executives and security teams

This is an old Linux kernel NFS client bug. On vulnerable kernels before 2.6.23, a local user may trigger a kernel Oops by using an overly long filename during NFS lookup. Business impact is service disruption, not data theft, based on the supplied sources. Exposure is most plausible on legacy Linux systems running kernels before 2.6.23, especially where local users can interact with NFS-mounted filesystems. Modern supported distributions are unlikely to be affected if vendor kernel updates were applied. Treat this as legacy hygiene unless old Linux or VMware-adjacent systems remain in production. It can disrupt service, but the evidence provided does not support emergency response for modern patched environments. Mitigation focus: Inventory Linux hosts with kernels before 2.6.23 or vendor backports from 2009.; Apply relevant vendor kernel updates from Debian, Ubuntu, Red Hat, VMware, or your platform maintainer.; Prioritize multiuser systems and hosts using NFS client mounts..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.