CVE-2026-74730

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...

CVE-2026-74730 NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...

CVE-2026-74730 NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...

CVE-2026-74730

CVE-2026-74730 is a use-after-free vulnerability in the Linux kernel NFS subsystem . When a FREE_STATEID operation is delayed, the struct nfs_server object can be freed while operations are still in flight, leading to memory corruption. The fix bumps the refcount of struct nfs_server for the dura...

EUVD-2026-64417

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...

PT-2026-79735

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs server' during a FREE STATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREE STATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the...

Linux Distros Unpatched Vulnerability : CVE-2026-74730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed...

CVE-2026-50112

Apache CloudStack versions 4.14.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by two related vulnerabilities in template download handling. When a tenant registers a VM template with directDownload=true pointing to a .metalink file, the management server fetches the metalink XML...

SUSE CVE-2026-72222

In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svcxprt across the asynchronous TLS handshake callback svctcphandshake stores the raw svcxprt pointer in tlshandshakeargs.tadata and submits the request through tlsserverhellox509. The handshake core takes only...

CVE-2026-72468

A flaw was found in the Linux kernel's xprtrdma component. A local administrator can exploit a race condition during an NFS/RDMA mount operation against RDMA device removal. This can lead to a null pointer dereference, causing the kernel to crash and resulting in a Denial of Service DoS...

CVE-2026-72467

A flaw was found in the Linux kernel's xprtrdma module. The system fails to properly check the return value of frwrwpcreate, which is responsible for creating a Memory Region. If this creation fails, a subsequent Network File System NFS over Remote Direct Memory Access RDMA read operation with an...

CVE-2026-16686

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

CVE-2026-16686

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have an improper-authentication flaw allowing unauthenticated remote attackers to access NFS-exported filesystems. CVSS 8.2 (HIGH), network-exploitable with no privileges required. No exploitation or patch details provided; refer to IBM support advisory for ...

EUVD-2026-62517

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

CVE-2026-16686 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

CVE-2026-16686 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

PT-2026-78459

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper authentication allows a remote attacker to gain unauthorized access to NFS-exported filesystems. NFS Network File System is a distributed file system protocol that...

CVE-2026-70415

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service...

EUVD-2026-61058

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service...

CVE-2026-70415

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service...