CVE-2026-89708

CVE-2026-89708 is a use-after-free in the Linux kernel's nfsd (NFS server) component, triggered during NFSv4 session teardown. After a DESTROY_SESSION , the session object can be freed via kfree() while rpciod still holds an in-flight callback rpc_task that dereferences clp->cl_cb_session. A s...