{ "cveId": "CVE-2026-89714", "url": "https://patchblox.com/security/cve/CVE-2026-89714", "summary": "CVE-2026-89714 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2026-89714, released September 23, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_se...", "description": "In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails nfs4_server_common_setup() allocates server-\u003Edelegation_hash_table first, but server-\u003Edestroy - the only path that frees the table via nfs4_destroy_server() - is not assigned until the very end of the function. If any intermediate step fails (the is_ds_only_client() check, nfs4_init_session(), nfs4_get_rootfh(), or nfs_probe_server()), the function returns with server-\u003Edestroy still NULL, so the caller\u0027s nfs_free_server() skips the destroy callback and the hash table is leaked (4 KiB per attempt with the default delegation watermark). This is trivially reachable from userspace: every failed NFSv4 mount leaks one allocation. A client that persistently retries a mount that cannot succeed leaks kernel memory without bound. Observed in production where a Longhorn backup poller retried mount.nfs4 against an NFSv3-only server roughly 10 times per second, leaking ~3.4 GiB of unreclaimable slab (kmalloc-rnd-13-4k) per day; the node accumulated 12 GiB of leaked slab before the source was identified via the kmem:kmalloc tracepoint (call_site=nfs4_delegation_hash_alloc). Reproducer: # server exports NFSv3 only (or export path absent for v4) while :; do mount -t nfs4 \u003Cserver\u003E:/missing /mnt; done # watch SUnreclaim in /proc/meminfo grow 4 KiB per iteration Free the table on the error paths between the allocation and the assignment of server-\u003Edestroy.", "published": "2026-09-11T20:19:58Z", "severity": "important", "epss": 0.00206, "epssPercentile": 0.10787, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel-livepatch-6.18.51-120.162", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.2.6-1", "fix": "DEBIAN-CVE-2026-89714", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89714", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "released": "2026-11-07T01:06:52Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T00:53:09Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }