Linux Kernel NFSv4 Compound Request Handling Vulnerability

A vulnerability in the Linux kernel's NFS server implementation can lead to undefined behavior when processing certain requests. Specifically, the function nfsd4_spo_must_allow() must verify that the request is a version 4 compound request. The vulnerability arises because, without this check, examining the request's state could produce unpredictable results.

Impact

Exploiting this vulnerability could cause undefined behavior in the NFS server, potentially leading to incorrect handling of requests or other unforeseen issues.