CVE-2026-89691

CVE-2026-89691 is an out-of-bounds read vulnerability in the Linux kernel's nfsd (Network File System Daemon) component. The nfsd4_release_compoundargs() function resets the args->ops pointer to the inline iops[8] array when the dynamically allocated buffer is freed, but fails to zero args-&gt...

PT-2026-90407

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the nfsd4 release compoundargs function. When the dynamically-allocated ops buffer is freed, the function resets args-ops to the inline iops8 array but...

USN-3655-1 linux vulnerabilities

Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memor...

USN-3653-2 linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities

USN-3653-1 fixed vulnerabilities and added mitigations in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. Jann Horn and Ken Johnson discovered that microprocessors utilizing...