In the Linux kernel, the following vulnerability has been resolved:
nfsd: call cacheput if xdrreserve_space returns NULL
If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with cache_get.
Reviwed-by: Jeff Layton jlayton@kernel.org