CVE-2026-89703

In the Linux kernel, the following vulnerability has been resolved: nfsd: set SCSTATUSFREED in nfsd4droprevokedstid for delegations nfsd4droprevokedstid handles FREESTATEID for admin-revoked delegations but does not set SCSTATUSFREED before releasing cllock. revokedelegation uses this flag to...

CVE-2026-89703

CVE-2026-89703 is a use-after-free vulnerability in the Linux kernel's NFS daemon (nfsd) . The function nfsd4_drop_revoked_stid() handles FREE_STATEID for admin-revoked delegations but fails to set the SC_STATUS_FREED flag before releasing cl_lock. As a result, revoke_delegation() cannot detect t...

CVE-2026-89703 nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations

In the Linux kernel, the following vulnerability has been resolved: nfsd: set SCSTATUSFREED in nfsd4droprevokedstid for delegations nfsd4droprevokedstid handles FREESTATEID for admin-revoked delegations but does not set SCSTATUSFREED before releasing cllock. revokedelegation uses this flag to...