The vulnerabilities of the `recv_done()` and `p9_cm_event_handler()` functions in the `net/9p/trans_rdma.c` file of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the recvdone and p9cmeventhandler functions in the net/9p/transrdma.c file of the Linux kernel is related to the implementation of incorrect thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

ROS-20260925-73-0093

The vulnerability of the p9clientwalk function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability allows an attacker to compromise the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/9p: fixed an issue where double requests were sent to p9fdcancelled. Syzkaller reports a KASAN issue as follows: General protection fault, likely due to a non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053292 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9clientrpc Syzbot with the help of KMSAN reported the following erro...

OESA-2026-3702 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098697 advisory. In the Linux kernel, the following vulnerability has been resolved: net: 9p: fix refcount leak in p9readwork error handling p9reqput need to be called when...

CVE-2026-72491

A flaw was found in the Linux kernel's net/9p RDMA transport module. An inconsistent locking mechanism around the rdma-state field allows for a race condition during connection teardown. This can lead to lost state transitions, corrupting the connection state machine. Consequently, a use-after-fr...

CVE-2026-72166

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...

UBUNTU-CVE-2026-72166

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...

CVE-2026-72166

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...

CVE-2026-72166 net/9p: fix infinite loop in p9_client_rpc on fatal signal

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...

Linux Distros Unpatched Vulnerability : CVE-2026-72166

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed b...

PT-2026-72354

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.4 through 6.12.77 Description An infinite loop occurs in the p9 client rpc function when it is called with the type P9 TFLUSH and the transport has no peer, such as an fd transport backed by pipes without a 9p server...

CVE-2026-72491: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

CVE-2026-72166: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...

PT-2026-111259

Уязвимость функций recv done и p9 cm event handler файла net/9p/trans rdma.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и...

CVE-2025-40004: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix buffer overflow in USB transport layer A buffer overflow vulnerability exists in the USB 9pfs transport layer where inconsistent size validation between packet header parsing and actual data copying allows a malicious...

EUVD-2024-53378

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-49765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: use a dedicated spinlock for transfd Shamelessly copying the explanation from Tetsuo Handa's suggested patch1 slightly reworded: syzbot is reporting...

CVE-2022-50114 net: 9p: fix refcount leak in p9_read_work() error handling

In the Linux kernel, the following vulnerability has been resolved: net: 9p: fix refcount leak in p9readwork error handling p9reqput need to be called when m-rreq-rc.sdata is NULL to avoid temporary refcount leak. Dominique: commit wording adjustments, p9reqput argument fixes for rebase...