103 matches found
Linux kernel NFS4 State DoS
The vulnerability in the nfsd4droprevokedstid function within the fs/nfsd/nfs4state.c component of the Linux kernel operating system is related to insufficient control over dynamically managed resources. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
PT-2026-104977
In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd net boolean flags to unsigned long flags word nfsd net contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4 end grace guards its drain path with...
PT-2026-93679
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the nfsd4 revoke export states function. The function drops the nn-client lock during the execution of revoke one stid and the subsequent read of clp-cl...
PT-2026-96546
In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc expire umount walk after dropping nfsd ssc lock nfsd4 ssc expire umount walks nn-nfsd ssc mount list with list for each entry safeni, tmp, .... For each expired entry it sets nsui busy = true, drops nfsd ssc loc...
PT-2026-96459
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG ON in nfsd4 alloc layout stateid on racing delegation revoke nfsd4 alloc layout stateid reads fp-fi deleg file without holding fi lock when the parent stateid is a delegation. A concurrent delegation revoke via the...
PT-2026-96362
In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4 acl to attr return value in nfsd4 create nfsd4 create stores the return value of nfsd4 acl to attr in status, but the switchcreate-cr type block unconditionally overwrites it in every branch. ACL translation...
PT-2026-96520
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4 ff encode layoutget The XDR buffer size calculation in nfsd4 ff encode layoutget has multiple errors that can result in either an out-of-bounds write or leaking uninitialized kernel memor...
PT-2026-96333
In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4 copy notify finished initializing the cpntf state after nfs4 alloc init cpntf state had already linked it into the s2s cp stateids IDR and the parent's sc cp list,...
PT-2026-90409
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the nfsd component, the nfsd4 create function fails to properly handle the return value of the nfsd4 acl to attr function. The return value is stored in the status variable, but a...
PT-2026-90389
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the nfsd4 ff encode getdeviceinfo function where the da addr body reservation is incorrectly calculated. The function computes the reservation as 16 + netid len + addr len...
PT-2026-96531
In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIG NFSD V4 2 INTER SSC is enabled, nfsd4 putfh can return success with fh dentry and fh export both NULL if fh verify returns nfserr stale and putfh-no...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the nfsd4 Drop revokedstid function, which lacks handling for SCTYPELAYOUT situations. As a result, when the client sends FREESTATEID, the layout stid is not properly released, potentially leading to...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: Duplicate SPI Handling CVE-2025-39797 kernel: lib/buildid: use kernelread for sleepable context CVE-2026-23002 kernel: futex: Drop CLONETHREAD requirement for private default hash...
Linux Distros Unpatched Vulnerability : CVE-2026-53396
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak and ignored error in nfsd4createfile nfsd4createfile has two bugs in...
CVE-2026-53395
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4create nfsd4create steals create-crdpacl/crpacl into the local nfsdattrs via the designated initializer, then immediately sets the source pointers to NULL. The subsequent conflict guard...
CVE-2026-53395
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4create nfsd4create steals create-crdpacl/crpacl into the local nfsdattrs via the designated initializer, then immediately sets the source pointers to NULL. The subsequent conflict guard...
CVE-2026-53395 nfsd: fix dead ACL conflict guard in nfsd4_create
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4create nfsd4create steals create-crdpacl/crpacl into the local nfsdattrs via the designated initializer, then immediately sets the source pointers to NULL. The subsequent conflict guard...
CVE-2026-53395
Summary (concrete details from provided documents): CVE-2026-53395 affects the Linux kernel NFS server (nfsd). In nfsd4_create, the code steals create->cr_dpacl/cr_pacl into a local nfsd_attrs via a designated initializer and then nils the source pointers. The subsequent conflict guard tests t...
PT-2026-61101
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nfsd4 create file function contains two issues related to Access Control List ACL handling. First, the return value of the nfsd4 acl to attr function is ignored. If the conversion fr...
UBUNTU-CVE-2026-53244
In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4createfile atomiccreate in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentrycreate so that it will drop the reference if an...