DEBIAN-CVE-2026-53398

In the Linux kernel, the following vulnerability has been resolved:  NFSD: Fix SECINFONONAME decode error cleanup  nfsd4decodesecinfononame() currently initializes sinexp after decoding sinstyle. If the XDR stream is truncated, the decoder returns nfserrbadxdr before sinexp is initialized.  Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFONONAME decode can therefore leave sinexp holding stale union contents from a previous operation.  The error response path still invokes nfsd4secinfononamerelease(), which calls expput() on a non-NULL sinexp.  Initialize sinexp before the first failable decode step, matching nfsd4decodesecinfo().