CVE-2026-89663

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability arises from improper handling of "copy-notify stateids" during their revocation. When a stateid's reference is dropped without unlinking it, the memory can be freed while still in use by a reader, leading t...

CVE-2026-89663

CVE-2026-89663 is a use-after-free vulnerability in the Linux kernel's NFS server (nfsd) subsystem, specifically in the management of copy-notify stateids . The root cause is a reference-counting race: all three revoke paths (parent-stid drain, OFFLOAD_CANCEL, and laundromat expiry) could drop a ...