CVE-2026-89686

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUGON in nfsd4alloclayoutstateid on racing delegation revoke nfsd4alloclayoutstateid reads fp-fidelegfile without holding filock when the parent stateid is a delegation. A concurrent delegation revoke via the laundromat...

CVE-2026-89686

nfsd in the Linux kernel contains a race condition in nfsd4_alloc_layout_stateid. When the parent stateid is a delegation, the function reads fp->fi_deleg_file without holding fi_lock. A concurrent delegation revoke via the laundromat can clear this pointer, causing nfsd_file_get() to return N...

EUVD-2026-76598

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUGON in nfsd4alloclayoutstateid on racing delegation revoke nfsd4alloclayoutstateid reads fp-fidelegfile without holding filock when the parent stateid is a delegation. A concurrent delegation revoke via the laundromat...