UBUNTU-CVE-2026-89695

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

CVE-2026-89695

A Denial of Service vulnerability in the Linux kernel's NFSD (Network File System Daemon) component. The nfsd4_decode_posixacl() function reads a client-supplied u32 entry count without capping it, passing it directly to an O(n²) bubble sort (sort_pacl_range()). A remote attacker can send a craft...

CVE-2026-89695

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

PT-2026-90411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd4 decode posixacl function where a u32 entry count is read from the wire and passed directly to posix acl alloc and sort pacl range. Because sort pacl range...