CVE-2026-53398

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinexp after decoding sinstyle. If the XDR stream is truncated, the decoder returns nfserrbadxdr before sinexp is initialized. Since comm...

CVE-2026-53398

CVE-2026-53398 (Linux kernel, NFSD) has a concrete fix for a decode error in SECINFO_NO_NAME handling within NFS (nfsd4_decode_secinfo_no_name). A truncated XDR stream could cause nfserr_bad_xdr to occur before sin_exp is initialized, leaving stale union contents and triggering an incorrect relea...

CVE-2026-53396 nfsd: fix posix_acl leak and ignored error in nfsd4_create_file

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak and ignored error in nfsd4createfile nfsd4createfile has two bugs in its ACL handling: The return value of nfsd4acltoattr is silently discarded. When the NFSv4-to-POSIX ACL conversion fails e.g., -EINVAL f...

CVE-2026-53394

In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...

CVE-2026-53394 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race

In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...

EUVD-2026-45517

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4create nfsd4create steals create-crdpacl/crpacl into the local nfsdattrs via the designated initializer, then immediately sets the source pointers to NULL. The subsequent conflict guard...

CVE-2026-53392

CVE-2026-53392 affects the Linux kernel’s NFSv4/flexfiles path. The flaw arises in ff_layout_alloc_lseg(), which decodes the filehandle-version array count and uses it to allocate with kzalloc_objs(). A zero count can yield ZERO_SIZE_PTR and get stored in dss_info->fh_versions, while later fle...

CVE-2026-53393

In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's write verifier nn-writeverf when this check...

EUVD-2026-45515

In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's write verifier nn-writeverf when this check...

EUVD-2026-45514

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the filehandle-version array count from the flexfiles layout body. The value is used as the count for kzallocobjs, and the current code only rejects...

CVE-2026-53391

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-DS body, then immediately calls strrchrbuf, '.' to locate the port...

OESA-2026-3025 libnfs security update

Package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level,asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions,and a synchronous library with POSIX-like VFS functions. Security Fixe...

OESA-2026-2994 uboot-tools security update

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfsreadlinkreply...

Linux Distros Unpatched Vulnerability : CVE-2026-53391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-...

PT-2026-61097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 flexfiles implementation where the ff layout alloc lseg function fails to properly validate the filehandle-version array count decoded from the flexfiles...

PT-2026-61425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cifs module where a dentry remains busy after unmounting. This occurs because the cifs file close work, handled by cfile-deferred, can be executed after the...

PT-2026-61100

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nfsd4 create function when a client encodes both FATTR4 WORD0 ACL and FATTR4 WORD2 POSIX DEFAULT,ACCESS ACL in the same CREATE fattr bitmap. The function...

PT-2026-61103

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd4 decode secinfo no name function where sin exp is initialized after the sin style is decoded. If the XDR External Data Representation stream is truncated, the...

Linux Distros Unpatched Vulnerability : CVE-2026-53399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to...

Linux Distros Unpatched Vulnerability : CVE-2026-53398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinexp after decoding sinstyle. If the XDR stream is truncated, the...