-

CVE-2026-89683

nfsd: fix dentry ref leak on V4ROOT export filehandle lookup

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix dentry ref leak on V4ROOT export filehandle lookup

nfsd_set_fh_dentry() leaks the dentry reference from
exportfs_decode_fh_raw() when the NFS3_FHSIZE or NFS_FHSIZE
switch cases detect NFSEXP_V4ROOT and goto out. The out: label
calls exp_put() but never dput(dentry), and fhp->fh_dentry was
never assigned so fh_put() cannot compensate.

A crafted NFSv3 filehandle targeting a V4ROOT export's fsid
triggers the leak on every request.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444
Version < d493cf57f4c4dae5396cd6ad41e5c209d0615a81
Status affected
Version ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444
Version < c1ae0f973bcba5730871e35976a0ab6878fdac34
Status affected
Version ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444
Version < 11db8df188b34bdb8c6a3a0bf438e5fc8cd75aca
Status affected
Version ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444
Version < 6247023fbbec1325029f2d5f2a7cdc0f9f9ea15a
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.12
Status affected
Version 0
Version < 6.12
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.072
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d493cf57f4c4dae5396cd6ad41e5c209d0615a81
https://git.kernel.org/stable/c/c1ae0f973bcba5730871e35976a0ab6878fdac34
https://git.kernel.org/stable/c/11db8df188b34bdb8c6a3a0bf438e5fc8cd75aca
https://git.kernel.org/stable/c/6247023fbbec1325029f2d5f2a7cdc0f9f9ea15a