CVE-2025-21900 NFSv4: Fix a deadlock when recovering state on a sillyrenamed file

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a deadlock when recovering state on a sillyrenamed file If the file is sillyrenamed, and slated for delete on close, it is possible for a server reboot to triggeer an open reclaim, with can again race with the...

Linux kernel NFS Export Buffer Overflow DoS

The vulnerability of the eshow function in the fs/nfsd/export.c module, which is part of the NFS network file system support in Linux kernels, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

USN-7383-2 linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Ublk userspace block driver; -...

USN-7383-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Ublk userspace block driver; -...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from cifs not clearing the server-smbdconn pointer on reconnect...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a possible memory leak during cifs session setup...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the nfsfattrinit function in the fs/nfs/inode.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

fs/nfsd/nfs4recover.c Heap Buffer Overflow DoS

The vulnerability of the cldpipeinprogressdowncall function in the fs/nfsd/nfs4recover.c module, which is part of the NFS network file system support in Linux kernels, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux nfsd4_copy Heap Buffer Overflow DoS

The vulnerability of the nfsd4copy function in the fs/nfsd/nfs4proc.c module of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

cifs-utils security vulnerabilities

cifs-utils is a toolkit from the individual developer Pavel Shilovsky. Provides utilities for managing CIFS network file system installations. A security vulnerability exists in cifs-utils that stems from the cifs.upcall program incorrectly invoking namespaces in a container environment, which...

nfsd NFS Data Compromise

The vulnerability of the nfs4stateshutdownnet function in the fs/nfsd/nfs4state.c module of the nfsd component of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux nfsd DoS

The vulnerability of the nfsd module’s fs/nfsd/vfs.c part of the Linux operating system is related to incorrect resource blocking. Exploiting this vulnerability can allow a hacker to cause service failures...

NFS File System Kernel Buffer Overflow DoS

The vulnerability of the nfsdnetinit function in the fs/nfsd/nfsctl.c file of the NFS network file system in Linux kernels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

NFSD: Prevent NULL dereference in nfsd4_process_cb_update()

...

kernel: cifs: Return correct error code from smb2_get_enc_key

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. An incorrect error code is returned when the client fails to retrieve an encryption key during encrypted file communications. A local user can exploit this issue during file operations to trigger a kernel...

Linux Distros Unpatched Vulnerability : CVE-2020-35513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: Nfsd failure to clear umask after processing an open or create Ubuntu Linux - A flaw incorrect umask during file or directory...

USN-7294-4 linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

USN-7294-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

SUSE CVE-2025-21795

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix hang in nfsd4shutdowncallback If nfs4client is in courtesy state then there is no point to send the callback. This causes nfsd4shutdowncallback to hang since clcbinflight is not 0. This hang lasts about 15 minutes until...

USN-7294-2 linux-aws, linux-oracle, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...