82 matches found
PT-2026-97937
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vxlan mdb flush function. The function iterates over Multicast Database MDB entries using hlist for each entry safe, which is designed to handle the...
PT-2026-97898
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lockd component when releasing locks by server IP address via the /proc/fs/nfsd/unlock ip endpoint. The nlmsvc match ip function incorrectly reverses its arguments...
CVE-2026-89484
A flaw was found in the Linux kernel's lockd component. This vulnerability occurs when the Network Lock Manager NLM client attempts to initialize file lock operations without successfully allocating a lockowner. This can lead to a NULL pointer dereference during the release of the file lock,...
CVE-2026-89484
In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclntlocksinitprivate installs NLM file lock operations even when nlmclntfindlockowner fails to allocate a lockowner. nlmclntproc then returns -ENOMEM, but the VFS sti...
CVE-2026-89485
In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlminspectfile lock-drop nlmtraversefiles pins the current file with fcount++ across a mutexunlock for nlminspectfile, but nothing pins the saved next pointer. A concurrent nlmreleasefile can kfree the...
DEBIAN-CVE-2026-89485
In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlminspectfile lock-drop nlmtraversefiles pins the current file with fcount++ across a mutexunlock for nlminspectfile, but nothing pins the saved next pointer. A concurrent nlmreleasefile can kfree the...
EUVD-2026-76390
In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclntlocksinitprivate installs NLM file lock operations even when nlmclntfindlockowner fails to allocate a lockowner. nlmclntproc then returns -ENOMEM, but the VFS sti...
PT-2026-90201
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lockd component where the nlm traverse files function pins the current file but fails to pin the saved next pointer across a mutex unlock for nlm inspect file. Thi...
SUSE CVE-2026-72219
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile leak when nlmdofopen fails A client can repeatedly drive nlmdofopen failures by presenting file handles that the underlying export rejects. After kzallocobj succeeds in nlmlookupfile, the freshly allocated...
Linux Distros Unpatched Vulnerability : CVE-2026-72219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lockd: Plug nlmfile leak when nlmdofopen fails A client can repeatedly drive nlmdofopen failures by presenting file handles that the underlying export rejects...
CVE-2026-74315
CVE-2026-74315 (Linux kernel) : The vulnerability arises in lockd/nlm4svc_lookup_file where file_handle hashing used the first LOCKD_FH_HASH_SIZE bytes of nfs_fh.data regardless of fh.size, causing inconsistent bucket lookups when a client presents a shorter file handle. A commit changed populati...
CVE-2026-72218 lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...
CVE-2026-72218 lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...
PT-2026-72406
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the lockd component. In the nlm lookup file function, the cached-file path reaches the found label even if nlm do fopen fails. This causes file-f count a...
PT-2026-72407
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the lockd component when the nlm do fopen function fails. A client can trigger this by providing file handles that the underlying export rejects. Specifically,...
EUVD-2015-8595
Malware in sbrugna...
EUVD-2017-4030
Malware in sbrugna...
CVE-2011-4191
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service abend or NFS outage via long packets...
The vulnerability of the `nlm_swap_auxiliary_headers_in` function in the `bfd/nlmcode.h` header of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the nlmswapauxiliaryheadersin function in the bfd/nlmcode.h header of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...
K01837042: Multiple Wireshark (tshark) vulnerabilities
Security Advisory Description CVE-2015-8711 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash v...