CVE-2026-89707

CVE-2026-89707 affects the Linux kernel nfsd subsystem, specifically the nfsd_cross_mnt() function. The root cause is a missing path_put() call in the error path when follow_down() returns a negative value, leaving the mntget()/dget() references acquired on entry unreleased. The impact is a memor...

CVE-2026-89707 nfsd: release path refs on follow_down() error

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return the error arm jumps to out without releasing those references: err =...

EUVD-2026-76619

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return the error arm jumps to out without releasing those references: err =...

PT-2026-90423

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow down error nfsd cross mnt initializes a local struct path with mntget and dget before calling follow down. On a negative return the error arm jumps to out without releasing those references: err ...