929 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the filehandle-version array count from the flexfiles layout body. This value is used as the count for kzallocobjs; currently, the code only rejects...
CVE-2026-31402
🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146690)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146690 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded...
CVE-2026-99052
A flaw was found in the Linux kernel. When a Network File System version 4 NFSv4 share configured with security labels is mounted multiple times, the Security-Enhanced Linux SELinux subsystem fails to preserve native labeling flags on the reused filesystem. This flaw allows a local user to silent...
SUSE CVE-2026-99052
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
AZL-110930 CVE-2026-99052 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
CVE-2026-99052
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
DEBIAN-CVE-2026-99052
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
UBUNTU-CVE-2026-99052
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
CVE-2026-99052
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
CVE-2026-99052 selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
CVE-2026-99052 selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
CVE-2026-99052
The Linux kernel contains a vulnerability where mounting an NFSv4 filesystem exported with security_label a second time can lead to a security regression. When the filesystem is remounted, sget_fc() returns the existing superblock, causing selinux_set_mnt_opts() to take an early exit without sett...
EUVD-2026-108847
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
PT-2026-122029
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVE LABELS on already-initialized sb in set mnt opts When an NFSv4 filesystem exported with security label is mounted a second time, sget fc returns the existing superblock and nfs get root calls security sb...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 3.11. It arises because SELinux fails to preserve NATIVELABELS when processing an initialized superblock in setmntopts; as a result, the NFSv4 file system exported via securitylabel is cleared of the shared nfsserver’s NFSCAPSECURITYLABEL...
Linux Distros Unpatched Vulnerability : CVE-2026-99052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc...
CVE-2026-90151
A flaw was found in the Linux kernel's Network File System version 4 NFSv4 component. This vulnerability occurs when an NFSv4 client allocation fails, leaving a stale pointer to a freed client. A local attacker could potentially exploit this use-after-free condition by triggering a callback looku...
CVE-2026-90149
A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles implementation. When an NFSv4.0 data server is used, two code paths incorrectly assume the client has a session, leading to a NULL pointer dereference. This issue can cause the kernel to crash, resulting in a...