CVE-2026-89689

CVE-2026-89689 is a use-after-free vulnerability in the Linux kernel's NFS daemon (nfsd) , specifically in nfsd4_sequence(). When the session shrinker reduces the number of active slots, free_session_slots() may free a slot still in use by the current request or a concurrent thread, because seq-&...

CVE-2026-89689 nfsd: don't free session slots that are still in use

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4sequence can free the very slot it is currently processing. When the session shrinker has reduced setargetmaxslots below sefchannel.maxreqs, the shrink path checks three...