In the Linux kernel, the following vulnerability has been resolved:
nfsd: fix potential UAF in nfsd4cbgetattr_release
Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last.
{ "urgency": "not yet assigned" }