CVE-2026-53026

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg<br /> <br /> In nfsd4_add_rdaccess_to_wrdeleg, if fp-&gt;fi_fds[O_RDONLY] is already<br /> set by another thread, __nfs4_file_get_access should not be called<br /> to increment the nfs4_file access count since that was already done<br /> by the thread that added READ access to the file. The extra fi_access<br /> count in nfs4_file can prevent the corresponding nfsd_file from being<br /> freed.<br /> <br /> When stopping nfs-server service, these extra access counts trigger a<br /> BUG in kmem_cache_destroy() that shows nfsd_file object remaining on<br /> __kmem_cache_shutdown.<br /> <br /> This problem can be reproduced by running the Git project&amp;#39;s test<br /> suite over NFS.