(I did shove xnu's NFS server and NFS client kext into an LLM, and it didn't find any bugs. So the actual bug might not be in NFS - maybe they're just using NFS as part of the exploit?)