untrusted comment: verify with openbsd-79-base.pub
RWTSdNN9A3yvWKRtXEB2tv+Y0aR4x8I0uUIIYXNcBsAKccvo71LlTEynYfFoM4CxHJ0+3H4SQFckSNtCpunGROk7cenWYTU9gQo=

OpenBSD 7.9 errata 016, September 14, 2026:

A malicous NFS server could aid a local user in avoiding access
controls.

Apply by doing:
    signify -Vep /etc/signify/openbsd-79-base.pub -x 016_nfs.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install a new kernel:
    KK=`sysctl -n kern.osversion | cut -d# -f1`
    cd /usr/src/sys/arch/`machine`/compile/$KK
    make obj
    make config
    make
    make install

Index: sys/nfs/nfs_subs.c
===================================================================
RCS file: /cvs/src/sys/nfs/nfs_subs.c,v
diff -u -p -u -r1.151.10.1 nfs_subs.c
--- sys/nfs/nfs_subs.c	14 Jul 2026 12:27:17 -0000	1.151.10.1
+++ sys/nfs/nfs_subs.c	6 Sep 2026 17:59:29 -0000
@@ -984,7 +984,7 @@ nfs_loadattrcache(struct vnode **vpp, st
 	 * information.
 	 */
 	np = VTONFS(vp);
-	if (vp->v_type != vtyp) {
+	if (vp->v_type == VNON) {
 		cache_purge(vp);
 		vp->v_type = vtyp;
 		if (vp->v_type == VFIFO) {