SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89680

HIGH · CVSS 7.5 EPSS 0.64%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the NFS server (nfsd) during inter-server COPY operations, where a failure in the setup process leads to a memory leak of nfsd_file references. This leak can result in resource exhaustion over time, potentially impacting system performance and stability. Administrators of Linux servers utilizing NFS should prioritize this fix to prevent long-term resource issues.

CVE
CVE-2026-89680
Severity
HIGH
CVSS
7.5
EPSS
0.64%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns nfserr_offload_denied directly, bypassing the out: label where release_copy_files() would drop the nf_dst reference taken by nfs4_preprocess_stateid_op(). Each failed inter-server COPY leaks one nfsd_file, pinning file/inode/dentry/vfsmount. Fix by setting status and jumping to out: instead of returning directly.