CVE-2026-43394

A flaw was found in the Linux kernel's nfsd component. The nfsdnllistenersetdoit function fails to properly release credential references, resulting in a resource leak. This issue could allow a local attacker to exhaust system resources, potentially leading to a Denial of Service DoS...

CVE-2026-23297

A flaw was found in the Linux kernel's nfsd component. A local user could exploit this vulnerability due to a missing putcred call in the nfsdnlthreadssetdoit function. This oversight leads to a memory leak of struct cred objects, which can result in a denial of service by exhausting available...

PT-2025-16577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the initialization of legacy client tracking in the Linux kernel's nfsd component. The problem arises from the duplicate call to nfsd4 legacy tracking ops-init,...

PT-2024-27223 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the NFSD component in the Linux kernel, specifically with the nfsd4 encode fattr4 function. The problem arises because args.acl is not initialized early and is...