158 matches found
CVE-2026-74315 lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()
In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first LOCKDFHHASHSIZE bytes of nfsfh.data when bucketing nlmfiles, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR functions fo...
EUVD-2026-59462
In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first LOCKDFHHASHSIZE bytes of nfsfh.data when bucketing nlmfiles, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR functions fo...
CVE-2026-74315
CVE-2026-74315 (Linux kernel) : The vulnerability arises in lockd/nlm4svc_lookup_file where file_handle hashing used the first LOCKD_FH_HASH_SIZE bytes of nfs_fh.data regardless of fh.size, causing inconsistent bucket lookups when a client presents a shorter file handle. A commit changed populati...
CVE-2026-74315 lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()
In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first LOCKDFHHASHSIZE bytes of nfsfh.data when bucketing nlmfiles, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR functions fo...
EUVD-2026-59118
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile leak when nlmdofopen fails A client can repeatedly drive nlmdofopen failures by presenting file handles that the underlying export rejects. After kzallocobj succeeds in nlmlookupfile, the freshly allocated...
CVE-2026-72219 lockd: Plug nlm_file leak when nlm_do_fopen() fails
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile leak when nlmdofopen fails A client can repeatedly drive nlmdofopen failures by presenting file handles that the underlying export rejects. After kzallocobj succeeds in nlmlookupfile, the freshly allocated...
CVE-2026-72219
The CVE-2026-72219 entry concerns a leak in the Linux kernel’s lockd: nlm_file allocations are not freed on nlm_do_fopen() failure. After kzalloc_obj() succeeds in nlm_lookup_file(), the new nlm_file isn’t yet in nlm_files[] when the failure path jumps to out_unlock, releasing nlm_file_mutex and ...
CVE-2026-72219 lockd: Plug nlm_file leak when nlm_do_fopen() fails
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile leak when nlmdofopen fails A client can repeatedly drive nlmdofopen failures by presenting file handles that the underlying export rejects. After kzallocobj succeeds in nlmlookupfile, the freshly allocated...
EUVD-2026-58976
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...
CVE-2026-72218 lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...
CVE-2026-72218 lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...
CVE-2026-72218
The CVE-2026-72218 entry describes a Linux kernel lockd file refcount leak in nlm_lookup_file() when nlm_do_fopen() fails on a hashed nlm_file. The cached-file path reaches the found: label unconditionally, causing *result and file->f_count to be updated before the error is returned. Wrappers ...
CVE-2026-72219: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile leak when nlmdofopen fails A client can repeatedly drive nlmdofopen failures by presenting file handles that the underlying export rejects. After kzallocobj succeeds in nlmlookupfile, the freshly allocated...
CVE-2026-72218: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...
PT-2026-72406
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the lockd component. In the nlm lookup file function, the cached-file path reaches the found label even if nlm do fopen fails. This causes file-f count a...
CVE-2026-74315: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first LOCKDFHHASHSIZE bytes of nfsfh.data when bucketing nlmfiles, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR functions fo...
PT-2026-72751
In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc lookup file file hash digests the first LOCKD FH HASH SIZE bytes of nfs fh.data when bucketing nlm files, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR...
The vulnerability of the nlm_unlock_files() function in the fs/lockd/svcsubs.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nlmunlockfiles function in the fs/lockd/svcsubs.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...