CVE-2026-89707

CVE-2026-89707 affects the Linux kernel nfsd subsystem, specifically the nfsd_cross_mnt() function. The root cause is a missing path_put() call in the error path when follow_down() returns a negative value, leaving the mntget()/dget() references acquired on entry unreleased. The impact is a memor...