CVE-2026-89674

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description An issue exists in the nfsd4 ff encode layoutget() function regarding XDR buffer size calculation. Errors in calculating the length of the file handle (fh len), user ID (uid), group ID (gid), and dataset length (ds len) can lead to two scenarios: an out-of-bounds write, where the function writes up to 5 bytes past the reserved buffer, or the leakage of uninitialized kernel memory to the client when string lengths are 4-byte aligned. XDR (External Data Representation) is a standard for encoding data for transmission between different computer architectures.

Recommendations Update the Linux kernel to version 7.2.6-1.1 or later.