In the Linux kernel, the following vulnerability has been resolved: NFSD: Never decrement pendingasynccopies on error The error flow in nfsd4copy() calls cleanupasynccopy(), which already decrements nn->pendingasync_copies.