CVE-2026-89658

A flaw was found in the Linux kernel's Network File System Daemon NFSD. During NFSv4.0 revoked-state cleanup, a race condition can occur where a client's state identifier stateid reference does not properly prevent the client from being prematurely freed while still in use. This use-after-free...

PT-2026-90374

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40 clean admin revoked takes a stateid reference under clp-cl lock, drops nn-client lock, and calls nfsd4 drop revoked stid, which dereferences the...