Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops based on the operation number, without any range checking of that value. It assumes that callers will be careful enough to avoid calling...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: nfs: fixed the acl memory leak in posixaclcreate When reviewing another nfs xfstests report, I found that errors related to acl and defaultACL in nfs3proccreate and nfs3procmknod might be exposed. These issues need to be...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: cifs: Return the correct error code from smb2getenckey Avoid a warning if the error is passed back up: 440700.376476 CIFS VFS: \otters.example.com cryptmessage: Could not get encryption key 440700.386947 ------------ Cut here...

Astra Linux – Vulnerability in Linux

A memory-bound write flaw 1 or 2 bytes of memory was identified in the Linux kernel’s NFS subsystem, related to the way users use mirroring replication of files via NFS. A user with access to the NFS mount could potentially exploit this flaw to crash the system or escalate privileges on the syste...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfsd: The value of sccount is decreased directly if the dlrecall queue operation fails. A deadlock warning occurred when invoking nfs4putstid after a failed dlrecall queue operation: T1 T2 nfs4laundromat nfs4getclientreaplist...

CVE-2026-69772

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

CVE-2026-69372

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

CVE-2026-69372

CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...

EUVD-2026-73474

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

CVE-2026-69772

CVE-2026-69772 is a heap-based buffer overflow in Windows Network File System (NFS) that allows an unauthorized attacker to execute code over a network, achieving full remote code execution. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indic...

Windows Network File System Denial of Service Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

Windows Network File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

PT-2026-87709

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

CVE-2026-69772: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

PT-2026-87410

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

CVE-2026-69372: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

RLSA-2026:61887 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: seccomp: passthrough uretprobe systemcall without filtering CVE-2025-21834 kernel: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv CVE-2026-23003 kernel: netfilter: nftables: Fix for...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207]

Summary IBM i is vulnerable to denial of service due to missing authentication and a buffer overflow CVE-2026-17057, CVE-2026-17207 in Network File System NFS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17057 DESCRIPTION: IBM i could allow a remote...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: NFSD: Fixed the handling of large file sizes in NFSv3 SETATTR/CREATE procedures. iattr::iasize is a lofft; therefore, these NFSv3 procedures must be careful to handle incoming client size values that are larger than s64max...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: lockd: Other missing fields are set when unlocking files. The vfslockfile function expects that the struct filelock structure is fully initialized by the caller. If the flfile field is NULL after re-exporting NFSv3, an OOP err...