Heap overflow in Linux NFSv4 replay cache lets unauthenticated attackers trigger out-of-bounds writes via crafted conflicting LOCK requests.