CVE-2026-89680
High
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns nfserr_offload_denied directly, bypassing the out: label where release_copy_files() would drop the nf_dst reference taken by nfs4_preprocess_stateid_op(). Each failed inter-server COPY leaks one nfsd_file, pinning file/inode/dentry/vfsmount. Fix by setting status and jumping to out: instead of returning directly.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedSep 11, 2026
First seenSep 11, 2026
How to fix
Update
- Linux Linuxd15f76fddc5d0215db5f18851048376a1ea79bd6, eb22420e5bd6eb3afa1f840036bb08a7ac90db76, 94c28af6fd89cb204975e49b824f8ee521bb84e9, ab949252fdf102ae74329a0caa7995a849d0dafa, 1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab, 424d5c95108a4809b832cb0a312c61de4aec0078, 6ed8d6de7ec90c4ba84eb82673058f506e5777fd, 88a76145451d703eedd867b5989bf73d17340399 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < d15f76fddc5d0215db5f18851048376a1ea79bd6, ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < eb22420e5bd6eb3afa1f840036bb08a7ac90db76, ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < 94c28af6fd89cb204975e49b824f8ee521bb84e9, ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < ab949252fdf102ae74329a0caa7995a849d0dafa, ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < 1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab, ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < 424d5c95108a4809b832cb0a312c61de4aec0078, ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < 6ed8d6de7ec90c4ba84eb82673058f506e5777fd, ce0887ac96d35c7105090e166bb0807dc0a0e838 ≤ v < 88a76145451d703eedd867b5989bf73d17340399, 5.6 | d15f76fddc5d0215db5f18851048376a1ea79bd6, eb22420e5bd6eb3afa1f840036bb08a7ac90db76, 94c28af6fd89cb204975e49b824f8ee521bb84e9, ab949252fdf102ae74329a0caa7995a849d0dafa, 1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab, 424d5c95108a4809b832cb0a312c61de4aec0078, 6ed8d6de7ec90c4ba84eb82673058f506e5777fd, 88a76145451d703eedd867b5989bf73d17340399 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.