CVE-2026-89705

CVE-2026-89705 is a lockless reader out-of-bounds read in the Linux kernel's nfsd component. The nfsd_dispatch() function uses rq_status_counter as a seq-lock protocol: it sets the counter to an odd value after decoding a request and back to even after full processing. However, the cache-hit (RC_...

CVE-2026-89705 nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths

In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rqstatuscounter to even on all nfsddispatch exit paths nfsddispatch sets rqstatuscounter to an odd value once a request has been decoded, and back to an even value once it has been fully processed, forming a seq-loc...