CVE-2026-90104

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decode_cb_sequence_args() allocates csa_rclists with kmalloc_objs(), so each referring_call_list starts uninitialized. decode_rc_list() assigns rcl_refcalls only when rcl_nrefcalls is nonzero. A valid list with zero referring calls therefore leaves the pointer uninitialized, and nfs4_callback_sequence() later passes stale slab contents to kfree(). Allocate csa_rclists with kzalloc_objs() so every rcl_refcalls member is NULL from the beginning, including valid empty referring call lists.

• https://git.kernel.org/stable/c/8fa4804fe62ca4155a2d8fc2789d630376cbf2fc
• https://git.kernel.org/stable/c/f31f3c042e024aef437cda42f0424ae8d4594b6c

Published

Sep 17, 2026

Last Modified

Sep 18, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90099In the Linux kernel, the following vulnerability has been re…
• CVE-2026-9010The Boost plugin for WordPress is vulnerable to time-based S…7.5
• CVE-2026-90100In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90101In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90102In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-90103In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-90105In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90106In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90107In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90108In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90109In the Linux kernel, the following vulnerability has been re…
• CVE-2026-9011The Ditty – Responsive News Tickers, Sliders, and Lists plug…7.5