CVE-2008-3915: Linux Kernel

High severity, CVSS 9.3. EPSS: 4.4% chance of exploitation in the next 30 days.

Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.

Affected products

• Linux Linux Kernel: version 2.6.18 only; version 2.6.19.4 only; version 2.6.19.5 only; version 2.6.19.7 only; version 2.6.20.16 only; version 2.6.20.17 only; …

Published 2008-09-11. Last modified 2026-06-16.