CVE-2026-89743

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response length nsmsendrecvmsglocked stores the virtqueue used-ring length reported by the NSM device into msg-resp.len without bounding it to the response buffer. A malicious or buggy backend...

CVE-2026-68179

A flaw was found in the Linux kernel's Network Shared Memory NSM module. A local attacker can exploit an issue in the nsmdevioctl function where an incorrect mutex unlock operation is performed. This occurs when an initial data copy fails, leading to an attempt to unlock a mutex that was never...