CVE-2026-89673

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description An issue exists in the nfsd4 ff encode getdeviceinfo() function where the da addr body reservation is incorrectly calculated. The function computes the reservation as 16 + netid len + addr len, while the xdr encode opaque() calls actually emit 8 + round up(netid len, 4) + round up(addr len, 4) bytes. This mismatch causes the declared length to exceed the actual encoded data by 2-8 bytes during every flexfile GETDEVICEINFO reply, resulting in the leakage of stale reply-page content to the client and the misalignment of the subsequent version list decode. XDR (External Data Representation) is a standard for encoding data for transmission between different computer architectures.

Recommendations Update to version 7.2.6-1.1.