CVE-2026-89673

A flaw was found in the Linux kernel's NFS daemon nfsd. A remote attacker could exploit an error in the XDR External Data Representation padding calculation within the ffencodegetdeviceinfo function. This mismatch between reserved and actual data size leads to the leakage of stale reply-page...

CVE-2026-89701

A flaw was found in the Linux kernel's Network File System Daemon nfsd. The TIMEDELEGACCESS and TIMEDELEGMODIFY decode paths do not properly validate the nanosecond nseconds value in timestamps. This allows a remote attacker to provide a malformed timestamp, which can then be written to disk,...

Siemens SIMATIC Devices Incorrect Calculation of Buffer Size (CVE-2022-43945)

The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call RPC into a single array of pages. A client can force the send...