PT-2026-90417

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME DELEG decode paths The xdrgen-based TIME DELEG ACCESS and TIME DELEG MODIFY decode arms store a raw uint32 t nseconds directly into tv nsec without enforcing nseconds NSEC PER SEC. The legacy nfsd4...

CVE-2025-40326

CVE-2025-40326 concerns the Linux kernel NFSD handling of the new time_deleg FATTR4 attributes. The vulnerability arises because NFSv4 clients may query these attributes via GETATTR, but RFC guidance indicates these attributes are invalid for GETATTR and should only be used with CB_GETATTR/SETATT...