In the Linux kernel, the following vulnerability has been resolved:
NFSD: Never decrement pendingasynccopies on error
The error flow in nfsd4copy() calls cleanupasynccopy(), which already decrements nn->pendingasync_copies.
{ "urgency": "not yet assigned" }