CVE-2026-89680

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix nfsd file leak on inter-server COPY setup failure

When nfsd4 setup inter ssc() fails, nfsd4 copy() returns nfserr offload denied directly, bypassing the out: label where release copy files() would drop the nf dst reference taken by nfs4 preprocess stateid op(). Each failed inter-server COPY leaks one nfsd file, pinning file/inode/dentry/vfsmount.

Fix by setting status and jumping to out: instead of returning directly.