CVE-2026-89706

In the Linux kernel NFS server (nfsd) , the write verifier (nn->writeverf) is not rotated when an async COPY operation's post-copy writeback fails. As a result, a client that receives NFS_UNSTABLE via CB_OFFLOAD and subsequently issues COMMIT receives the same verifier value , leading the clie...