CVE-2026-31404

A flaw was found in the Linux kernel's Network File System Daemon NFSD component. This vulnerability occurs because certain sub-objects are freed prematurely while still being accessed by other parts of the system. A local attacker could potentially trigger a Use-After-Free UAF condition, leading...

CVE-2026-31403

A flaw was found in the Linux kernel's Network File System Daemon NFSD component. A local user can exploit this vulnerability by opening the /proc/fs/nfs/exports file and then causing the associated network namespace to be destroyed. Subsequent attempts to read from the still-open file descriptor...

CVE-2026-31404

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-31402

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer rpibufNFSD4REPLAYISIZE to store encoded operation responses. This size was calculated based on OPEN responses and...

CVE-2026-31402 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer rpibufNFSD4REPLAYISIZE to store encoded operation responses. This size was calculated based on OPEN responses and...

CLEANSTART-2026-XU81487 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 4.13.0-r0, 4.13.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Linux kernel NFS DoS

The vulnerability of the nfsd4encodefattr4 function in the fs/nfsd/nfs4xdr.c module, which is part of the Linux kernel’s Network File System support, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel Network File System Buffer Overflow DoS

The vulnerability of the netfsreadtopagecache function in the fs/netfs/bufferedread.c module of the Linux kernel’s network file system support mechanism is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

A flaw null pointer dereference in the Linux kernel NFS functionality was found in the way client does some specific action for existing NFS connection. A client user could use this flaw to crash the server system...

NFS D4 Decode Compound

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

GO-2026-4816 NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs

NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs...

SUSE-SU-2026:1081-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui bsc1254992. - CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply...

CVE-2026-23297

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsdnlthreadssetdoit. syzbot reported memory leak of struct cred. 0 nfsdnlthreadssetdoit passes getcurrentcred to nfsdsvc, but putcred is not called after that. The cred is finally passed down to...

UBUNTU-CVE-2026-23297

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsdnlthreadssetdoit. syzbot reported memory leak of struct cred. 0 nfsdnlthreadssetdoit passes getcurrentcred to nfsdsvc, but putcred is not called after that. The cred is finally passed down to...

SUSE-SU-2026:20873-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migratefolio in gfs2rgrp,metaaops bsc1249590. - CVE-2025-39964: crypto: afalg - Disallow concurrent writes in afalgsendmsg bsc1251966. -...

fs/nfsd/nfs4recover.c Heap Buffer Overflow DoS

The vulnerability of the cldpipeinprogressdowncall function in the fs/nfsd/nfs4recover.c module, which is part of the NFS network file system support in Linux kernels, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

NFS Client Heap Buffer Overflow DoS

The vulnerability of the nfsdorefmount function in the fs/nfs/nfs4namespace.c module, which is part of the NFS client support in Linux kernel, stems from the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

fs/nfsd/vfs.c NFS DoS

The vulnerability of the nfsdrename function in the fs/nfsd/vfs.c module, which is part of the network file system support in Linux kernels, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...

SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0962-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0962-1 advisory. The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...