CVE-2017-8797: The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processi...

Security readout for executives and security teams

CVE-2017-8797 is a Linux kernel NFSv4 server flaw that can crash knfsd and may soft-lock the host. A remote attacker sending affected NFSv4 pNFS requests over UDP could cause a denial of service. The sources do not show active exploitation. Exposure is most likely on Linux systems running vulnerable kernels with the NFSv4 server enabled and reachable over UDP. The bundle does not provide a complete vendor or distribution affected-version matrix beyond upstream Linux before 4.11.3 and referenced Red Hat advisories. Prioritize remediation for internet-exposed or business-critical NFS servers because the plausible impact is service outage or host instability. Lower urgency is reasonable for isolated systems already protected by network controls, but patch during the next kernel maintenance window. Mitigation focus: Update to a kernel containing the 4.11.3-era upstream fix or vendor backport.; Apply the relevant Red Hat advisory package if using affected Red Hat products.; Restrict NFSv4 service exposure to trusted networks where operationally possible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.