CVE-2026-90104 | Linux Kernel up to 7.2.5 NFSv4 Callback Decoding decode_cb_sequence_args uninitialized variable

September 17, 2026 Yanac

A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as very critical. This vulnerability affects the function decode_cb_sequence_args of the component NFSv4 Callback Decoding. The manipulation leads to use of uninitialized variable.

This vulnerability is uniquely identified as CVE-2026-90104. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More