CVE-2026-53394

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the nfsd component during a race condition involving NFSv4.0 OPEN threads with the same owner string. When the find or alloc open stateowner() function encounters an unconfirmed owner, it calls release openowner() and sets the oo variable to NULL. Because the execution flow bypasses the guard that would free a pre-allocated new variable and instead calls alloc stateowner(), the previous allocation of the slab object and owner name buffer is overwritten and leaked. This happens if a concurrent thread inserts a new unconfirmed owner into the hash between retry iterations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.