CVE-2026-89680
Received Received - Intake

Memory Leak in Linux Kernel NFS Server

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns nfserr_offload_denied directly, bypassing the out: label where release_copy_files() would drop the nf_dst reference taken by nfs4_preprocess_stateid_op(). Each failed inter-server COPY leaks one nfsd_file, pinning file/inode/dentry/vfsmount. Fix by setting status and jumping to out: instead of returning directly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-12
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-89680
EUVD
EUVD-2026-76592

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the NFS (Network File System) daemon. When a specific operation called inter-server COPY fails during setup, the system does not properly release file references, causing a gradual buildup of unused file objects. This can lead to resource exhaustion over time.

Detection Guidance

This vulnerability is specific to the Linux kernel's NFS server implementation and may not have direct detection commands. Monitor for unexpected nfsd_file leaks or failed inter-server COPY operations in kernel logs. Check for increased memory usage or file descriptor leaks in NFS-related processes.

Impact Analysis

The impact includes potential system slowdowns or crashes due to resource exhaustion. If exploited repeatedly, it could degrade performance or cause denial-of-service conditions on systems using NFS for file sharing.

Mitigation Strategies

Apply the latest Linux kernel patches that include the fix for this issue. Restart NFS services after patching to ensure the updated code is active. Monitor system logs for any signs of nfsd_file leaks or failed COPY operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-89680. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart