CVE-2026-89690

In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in-flight svcrqst under rcureadlock and, for NFSv4 requests, reads opnums out of args-ops. But args-ops is a separate vmalloc buffer...

CVE-2026-89690

CVE-2026-89690 is a use-after-free vulnerability in the Linux kernel's nfsd subsystem, specifically in the rpc_status netlink dumpit path. The dumpit walks in-flight NFSv4 requests under rcu_read_lock and reads opnums from args->ops[], a separate vmalloc buffer. However, nfsd4_release_compound...