The Linux kernel's nfsd component had a vulnerability (CVE-2026-53394) where the function find_or_alloc_open_stateowner() could leak memory due to a race condition. When encountering an unconfirmed owner, the code would release the openowner and set the pointer to NULL but then proceed to allocate a new stateowner unconditionally, overwriting the pointer to a previously allocated object and causing a memory leak. This race requires two concurrent NFSv4.0 OPEN threads with the same owner string and a concurrent insertion of a new unconfirmed owner between retry attempts. The fix adds a retry jump to reuse the already allocated object, preventing the leak.

The vulnerability causes a memory leak in the Linux kernel's NFS server under specific race conditions involving concurrent NFSv4.0 OPEN requests with the same owner string. While the window for exploitation is narrow, repeated triggering under adversarial conditions can lead to resource exhaustion or degraded service availability due to leaked memory allocations.

A fix has been implemented in the Linux kernel to address this vulnerability by changing the retry logic to reuse allocated objects and prevent memory leaks. Users should apply the official kernel updates or patches that include this fix. Since this is a kernel-level issue, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisory for the current remediation guidance.