Database/Control plane, storage & DevOps
Windows Services for NFS: use-after-free in the ONCRPC XDR driver allows unauthenticated remote code execution
Impact
A use-after-free in the ONCRPC XDR driver behind Windows Services for NFS lets an unauthenticated attacker execute code over the network, scored 9.8. The bug is in a kernel-mode driver, so success means code in the kernel of the file server, not in a user session. This matters to a fleet only where a Windows Server host with the NFS Server or Client role serves or mounts shares - typically a legacy file server holding datasets or scratch space that Linux GPU nodes mount. Such a server is usually reachable from the compute network by design, and compromising it puts the attacker in the path of the data the fleet trains on. Microsoft assigned two ids for the same flaw class in the same driver in the same monthly update; they are covered together here because the fix and the maintenance action are identical.
Who can reach it
Anyone who can send RPC traffic to the NFS ports (typically 111 and 2049) of an affected Windows Server. No authentication and no user interaction. Only hosts with Services for NFS installed are exposed; the affected list is Windows Server 2012 through 2019.
What to do
Install the September 2026 Windows security update for the affected Windows Server builds and reboot - a kernel-mode driver fix, so the node goes down for the restart. Where NFS on Windows is not actually used, removing the Services for NFS role removes the exposure outright. Where it is used, restrict the NFS ports to the subnets that need them until the reboot window; 2012 and 2012 R2 are out of standard support, so confirm you have an update channel for them at all before planning around one.
Also covers 1 CVE
The vendor assigned a separate id to each affected code path. They share this advisory, this score and this fix, so they are one entry here.
References
Related entries
- Linux SUNRPC (xdr_buf_to_bvec, nfsd write path): xdr_buf_to_bvec stores a bio_vec before checking the slot is in rangeCVE-2026-72217 · Linux SUNRPC (xdr_buf_to_bvec, nfsd write path)Critical
- Linux VXLAN driver (transmit-path header pulls): `vxlan_xmit()`, `arp_reduce()` and `vxlan_mdb_entry_skb_get()`CVE-2026-74474 · Linux VXLAN driver (transmit-path header pulls)Critical
- Airflow Keycloak provider: credentials of any confidential client in the realm log into AirflowCVE-2026-76187 · Apache Airflow Keycloak provider (unauthenticated token endpoint, client-credentials grant)Critical
- Airflow FAB provider: password reset fails to evict existing sessions, so a stolen cookie keeps workingCVE-2026-82311 · Apache Airflow FAB provider (password reset does not delete database-backed sessions)Critical
- Linux nfsd: async server-side COPY registers a stateid pointing into a reused request bufferCVE-2026-89676 · Linux NFS server (nfsd, s2s_cp_stateids IDR for async COPY)Critical
- Linux nfsd: filehandle composed from a stale dentry when dentry_create returns a different dentryCVE-2026-89677 · Linux NFS server (nfsd4_create_file, fh_compose on the wrong dentry)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.