CVE-2026-89668

CVE CVE-2026-89668EUVD EUVD-2026-76580Published 2026-09-11T19:45:54.000ZLast changed 2026-09-13T06:32:50.000ZCVSS 7.8

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() nfsd_debugfs_init() runs before nfsd4_init_slabs() in init_nfsd(). If the slab allocation fails, the bare "return retval" bypasses nfsd_debugfs_exit(), leaving orphan debugfs files with stale fops pointers into the freed module text. Move nfsd_debugfs_init() to after the slab init succeeds, so the early return has no debugfs state to clean up. Since debugfs is now the more recently initialized of the two, also update the unwind paths to match reverse-initialization (LIFO) order: run nfsd_debugfs_exit() before nfsd4_free_slabs() in both the init_nfsd() error path and exit_nfsd(). The nfsd debugfs files only reference module-global state and have no dependency on the slab caches, so that reordering is a cleanup with no functional change.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux 9fe5ea760e64f04412dbed51645a0dac7220d40a <2c390c8a1764d67095fe444401861fac4c049362; patch: 7.2.4; 9fe5ea760e64f04412dbed51645a0dac7220d40a <ab43ff94f5dfc2b6a080b167b69855eb7655c98b; patch: 7.3-rc1; patch: 6.18.50; 9fe5ea760e64f04412dbed51645a0dac7220d40a <4ae5d7490ae6a7b83b3d607f88c499f4f85e753a; patch: 0; 6.16

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.