4404 matches found
CVE-2026-89710
In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfslayoutprocess forget path When the server returns a new layout stateid while a valid one is still held, pnfslayoutprocess calls pnfsmarkmatchinglsegsreturn on the on-stack freeme list a...
CVE-2026-89710 NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfslayoutprocess forget path When the server returns a new layout stateid while a valid one is still held, pnfslayoutprocess calls pnfsmarkmatchinglsegsreturn on the on-stack freeme list a...
CVE-2026-89710 NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfslayoutprocess forget path When the server returns a new layout stateid while a valid one is still held, pnfslayoutprocess calls pnfsmarkmatchinglsegsreturn on the on-stack freeme list a...
CVE-2026-89710
CVE-2026-89710 is a layout segment leak in the Linux kernel's NFSv4.1/pNFS subsystem. When the server returns a new layout stateid while a valid one is still held, pnfs_layout_process() jumps to out_forget without draining the on-stack free_me list; only the success path calls pnfs_free_lseg_list...
CVE-2026-89686
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUGON in nfsd4alloclayoutstateid on racing delegation revoke nfsd4alloclayoutstateid reads fp-fidelegfile without holding filock when the parent stateid is a delegation. A concurrent delegation revoke via the laundromat...
EUVD-2026-76598
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUGON in nfsd4alloclayoutstateid on racing delegation revoke nfsd4alloclayoutstateid reads fp-fidelegfile without holding filock when the parent stateid is a delegation. A concurrent delegation revoke via the laundromat...
CVE-2026-89681
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORKSTRUCTPENDING before the callback is invoked, so delayedworkpending in lmbreakertimedout can return false while the fence worker is already running...
CVE-2026-89681 nfsd: fix layout fence worker double-reference race
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORKSTRUCTPENDING before the callback is invoked, so delayedworkpending in lmbreakertimedout can return false while the fence worker is already running...
CVE-2026-89681 nfsd: fix layout fence worker double-reference race
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORKSTRUCTPENDING before the callback is invoked, so delayedworkpending in lmbreakertimedout can return false while the fence worker is already running...
CVE-2026-89681
A race condition in the Linux kernel's nfsd component (the NFS server daemon) affects the layout fence worker. Because the workqueue core clears WORK_STRUCT_PENDING before invoking the callback, delayed_work_pending() in lm_breaker_timedout() can return false while a fence worker is already runni...
CVE-2026-81002 xdp: fix zero-copy frame layout
In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...
EUVD-2026-76325
In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...
CVE-2026-89710: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfslayoutprocess forget path When the server returns a new layout stateid while a valid one is still held, pnfslayoutprocess calls pnfsmarkmatchinglsegsreturn on the on-stack freeme list a...
ROS-20260911-73-0094
The vulnerability of the Layout component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
PT-2026-90397
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK STRUCT PENDING before the callback is invoked, so delayed work pending in lm breaker timedout can return false while the fence worker is already...
PT-2026-90426
In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs layout process forget path When the server returns a new layout stateid while a valid one is still held, pnfs layout process calls pnfs mark matching lsegs return on the on-stack free ...
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
CVE-2026-87566
An observable discrepancy flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540021850...
CVE-2026-87566
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87566
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...