CVE-2026-89784

A flaw was found in the Linux kernel's SUNRPC component. When an in-kernel RPC service registers with the local rpcbind under memory pressure, a failure in memory allocation can lead to a NULL pointer being dereferenced. This unchecked NULL pointer can cause the kernel to crash, resulting in a Denial of Service (DoS).

This vulnerability is rated with a Low severity impact because exploitation requires acute system memory exhaustion during the registration of kernel RPC services with the local rpcbind daemon. Local unprivileged users cannot reliably induce the specific allocation failures required to trigger this condition during service startup. Furthermore, an occurrence solely leads to a kernel crash and denial of service without exposing sensitive information or allowing privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.