{"id":"CVE-2026-89680","summary":"nfsd: fix nfsd_file leak on inter-server COPY setup failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfsd_file leak on inter-server COPY setup failure\n\nWhen nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns\nnfserr_offload_denied directly, bypassing the out: label where\nrelease_copy_files() would drop the nf_dst reference taken by\nnfs4_preprocess_stateid_op(). Each failed inter-server COPY\nleaks one nfsd_file, pinning file/inode/dentry/vfsmount.\n\nFix by setting status and jumping to out: instead of returning\ndirectly.","modified":"2026-11-01T02:30:18.411960946Z","published":"2026-09-11T19:46:03.468Z","related":["SUSE-SU-2026:24179-1","SUSE-SU-2026:24181-1","SUSE-SU-2026:24182-1","SUSE-SU-2026:24184-1","SUSE-SU-2026:24197-1","SUSE-SU-2026:24235-1","SUSE-SU-2026:24315-1","SUSE-SU-2026:24316-1","SUSE-SU-2026:4640-1","SUSE-SU-2026:4706-1","openSUSE-SU-2026:11805-1","openSUSE-SU-2026:22091-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89680.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab"},{"type":"WEB","url":"https://git.kernel.org/stable/c/424d5c95108a4809b832cb0a312c61de4aec0078"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6ed8d6de7ec90c4ba84eb82673058f506e5777fd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/88a76145451d703eedd867b5989bf73d17340399"},{"type":"WEB","url":"https://git.kernel.org/stable/c/94c28af6fd89cb204975e49b824f8ee521bb84e9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ab949252fdf102ae74329a0caa7995a849d0dafa"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d15f76fddc5d0215db5f18851048376a1ea79bd6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/eb22420e5bd6eb3afa1f840036bb08a7ac90db76"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89680.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89680"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"ce0887ac96d35c7105090e166bb0807dc0a0e838"},{"fixed":"d15f76fddc5d0215db5f18851048376a1ea79bd6"},{"fixed":"eb22420e5bd6eb3afa1f840036bb08a7ac90db76"},{"fixed":"94c28af6fd89cb204975e49b824f8ee521bb84e9"},{"fixed":"ab949252fdf102ae74329a0caa7995a849d0dafa"},{"fixed":"1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab"},{"fixed":"424d5c95108a4809b832cb0a312c61de4aec0078"},{"fixed":"6ed8d6de7ec90c4ba84eb82673058f506e5777fd"},{"fixed":"88a76145451d703eedd867b5989bf73d17340399"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89680.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.0"},{"fixed":"5.10.273"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.224"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.109"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.50"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89680.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}