CVE-2026-89664

CVE-2026-89664 is a memory-leak vulnerability in the Linux kernel NFS daemon (nfsd) . When nfsd4_decode_createhow4() allocates refcounted posix_acl objects for an OPEN compound, they were never released on two code paths: (1) the short-circuit path taken when nfsd4_decode_open_claim4() returns a ...

EUVD-2026-76576

In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via oprelease nfsd4decodecreatehow4 calls nfsd4decodefattr4, which allocates refcounted struct posixacl objects via posixaclalloc and stores them in open-oppacl and open-opdpacl. These pointe...