CVE-2026-89685

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A clock domain mismatch in the clientsstillreclaiming function allows a remote attacker to indefinitely hold the server in a grace period. By sending specific CLAIMPREVIOUS OPEN requests, an attacker can block all...

CVE-2026-89685

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clientsstillreclaiming clientsstillreclaiming computes a deadline from nn-boottime CLOCKREALTIME, 1.7 billion but compares it against ktimegetboottimeseconds CLOCKBOOTTIME, seconds since boot. T...

CVE-2026-89685

CVE-2026-89685 affects the nfsd subsystem in the Linux kernel . The function clients_still_reclaiming() computes a grace-period deadline from nn->boot_time (CLOCK_REALTIME, ~1.7 billion seconds) but compares it against ktime_get_boottime_seconds() (CLOCK_BOOTTIME, seconds since boot). Because ...

EUVD-2026-76597

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clientsstillreclaiming clientsstillreclaiming computes a deadline from nn-boottime CLOCKREALTIME, 1.7 billion but compares it against ktimegetboottimeseconds CLOCKBOOTTIME, seconds since boot. T...

CVE-2026-89685 nfsd: fix clock domain mismatch in clients_still_reclaiming()

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clientsstillreclaiming clientsstillreclaiming computes a deadline from nn-boottime CLOCKREALTIME, 1.7 billion but compares it against ktimegetboottimeseconds CLOCKBOOTTIME, seconds since boot. T...

PT-2026-90401

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients still reclaiming clients still reclaiming computes a deadline from nn-boot time CLOCK REALTIME, 1.7 billion but compares it against ktime get boottime seconds CLOCK BOOTTIME, seconds sin...