Rare EACCES errors occurred during large NFS file copies when Kerberos was enabled.
Kernel retransmissions with new GSS sequence numbers caused HMAC mismatches on stale responses.
The bug was reproduced using a memory-backed FUSE filesystem, eBPF tracing, and a human-firewall packet delay.
Two kernel patches were applied: caching old sequence numbers per the RFC and preventing immediate retransmission on checksum error.
Fixes are merged upstream and will be available in Linux 6.16.
Get notified when new stories are published for "🇺🇸 Hacker News English"