CVE-2026-89680

A flaw was found in the Linux kernel's nfsd component. This vulnerability occurs when an inter-server COPY operation fails during its setup phase, leading to improper resource cleanup. Consequently, each failed operation results in a memory leak, consuming system resources. A remote attacker could repeatedly trigger these failures, potentially leading to resource exhaustion and a Denial of Service (DoS) on the affected system.

An nfsd resource leak can occur when nfsd4_setup_inter_ssc fails during an NFSv4 COPY operation. The error path returned directly and skipped the common cleanup path, leaving an nfsd_file reference held and pinning related file, inode, dentry, and vfsmount objects. For the CVSS the PR:L is used because practical triggering normally requires a client that can access the NFS service and issue COPY operations against an allowed export or session. The issue is network reachable through nfsd, but it depends on the inter-server COPY path and a setup failure, so AC:H is used. Impact is denial of service through cumulative resource exhaustion. No direct confidentiality or integrity impact is assigned because the observed primitive is a reference leak, not UAF, OOB access, info leak, or arbitrary write.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.