CVE-2026-89701

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIMEDELEG decode paths The xdrgen-based TIMEDELEGACCESS and TIMEDELEGMODIFY decode arms store a raw uint32t nseconds directly into tvnsec without enforcing nseconds NSECPERSEC. The legacy...

EUVD-2026-76613

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIMEDELEG decode paths The xdrgen-based TIMEDELEGACCESS and TIMEDELEGMODIFY decode arms store a raw uint32t nseconds directly into tvnsec without enforcing nseconds NSECPERSEC. The legacy...

CVE-2026-89701

CVE-2026-89701 is a validation flaw in the Linux kernel's nfsd (NFS server daemon). The xdrgen-based TIME_DELEG_ACCESS and TIME_DELEG_MODIFY decode paths store a raw uint32_t nseconds value directly into tv_nsec without enforcing the nseconds

CVE-2026-89701 nfsd: validate nseconds in TIME_DELEG decode paths

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIMEDELEG decode paths The xdrgen-based TIMEDELEGACCESS and TIMEDELEGMODIFY decode arms store a raw uint32t nseconds directly into tvnsec without enforcing nseconds NSECPERSEC. The legacy...

EUVD-2026-76578

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops A client can send an NFSv3 SETATTR, CREATE, MKDIR, SYMLINK or MKNOD carrying an atime or mtime whose nseconds field is out of range. The value is well-formed on t...

CVE-2026-89666

CVE-2026-89666 affects the Linux kernel's nfsd (NFS server daemon). A client can send an NFSv3 SETATTR, CREATE, MKDIR, SYMLINK, or MKNOD carrying an atime or mtime whose nseconds field is out of range —it decodes as a valid uint32 but is not a valid timespec64. Nothing in the setattr path clamps ...

PT-2026-90417

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME DELEG decode paths The xdrgen-based TIME DELEG ACCESS and TIME DELEG MODIFY decode arms store a raw uint32 t nseconds directly into tv nsec without enforcing nseconds NSEC PER SEC. The legacy nfsd4...