CVE-2026-89695

A flaw was found in the Linux kernel's Network File System Daemon nfsd. The nfsd4decodeposixacl function, responsible for decoding POSIX Access Control Lists ACLs, does not properly cap the entry count received from a client. A remote attacker can exploit this by sending a specially crafted ACL...