In the Linux kernel, the following vulnerability has been resolved:
NFS/localio: Fix a race in nfslocalopen_fh()
Once the clp->cluuid.lock has been dropped, another CPU could come in and free the struct nfsdfile that was just added. To prevent that from happening, take the RCU read lock before dropping the spin lock.