CVE-2026-89684 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfs4_alloc_init_cpntf_state race condition

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.108/6.18.49/7.2.3. This vulnerability affects the function nfs4_alloc_init_cpntf_state of the component nfsd. Performing a manipulation results in race condition.

This vulnerability is cataloged as CVE-2026-89684. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More