EUVD-2026-81744

In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation failure nfs4allocclient allocates an NFSv4.0 callback identifier before it finishes setting up the client. If any later initialization step fails, the error path frees the...

CVE-2026-90151

CVE-2026-90151 is a use-after-free in the Linux kernel's NFSv4 subsystem. When nfs4_alloc_client() fails after allocating a callback identifier, the error path frees the nfs_client directly without removing the cb_ident_idr entry. A subsequent NFSv4.0 callback lookup can then dereference the stal...