{"id":"CVE-2026-89680","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-89680","summary":"nfsd: fix nfsd_file leak on inter-server COPY setup failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfsd_file leak on inter-server COPY setup failure\n\nWhen nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns\nnfserr_offload_denied directly, bypassing the out: label where\nrelease_copy_files() would drop the nf_dst reference taken by\nnfs4_preprocess_stateid_op(). Each failed inter-server COPY\nleaks one nfsd_file, pinning file/inode/dentry/vfsmount.\n\nFix by setting status and jumping to out: instead of returning\ndirectly.","published":"2026-09-11T19:46:03.468Z","modified":"2026-09-14T03:46:28.053603437Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"6.12.109"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab"},{"type":"WEB","url":"https://git.kernel.org/stable/c/424d5c95108a4809b832cb0a312c61de4aec0078"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6ed8d6de7ec90c4ba84eb82673058f506e5777fd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/88a76145451d703eedd867b5989bf73d17340399"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89680.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89680"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-14T03:46:28.053603437Z"}}