CVE-2026-89701

CVE-2026-89701 is a validation flaw in the Linux kernel's nfsd (NFS server daemon). The xdrgen-based TIME_DELEG_ACCESS and TIME_DELEG_MODIFY decode paths store a raw uint32_t nseconds value directly into tv_nsec without enforcing the nseconds

CVE-2026-89666 nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops A client can send an NFSv3 SETATTR, CREATE, MKDIR, SYMLINK or MKNOD carrying an atime or mtime whose nseconds field is out of range. The value is well-formed on t...