Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfsd: calls oprelease, even when opfunc returns an error. For operations with “trivial” responses, nfsd4encodeoperation will shortcut most of the encoding process and simply proceed to marshaling the status. One of the things it...

CVE-2026-89664

CVE-2026-89664 affects the Linux kernel NFS daemon (nfsd) and causes a memory leak of refcounted POSIX ACL objects. The leak occurs when malformed NFSv4 OPEN compound operations carrying valid POSIX ACL attributes trigger a short-circuit path in nfsd4_open_omfg() where nfsd4_open() is never invok...

EUVD-2026-76576

In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via oprelease nfsd4decodecreatehow4 calls nfsd4decodefattr4, which allocates refcounted struct posixacl objects via posixaclalloc and stores them in open-oppacl and open-opdpacl. These pointe...

CVE-2026-89664 nfsd: release OPEN-decoded posix ACLs via op_release

In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via oprelease nfsd4decodecreatehow4 calls nfsd4decodefattr4, which allocates refcounted struct posixacl objects via posixaclalloc and stores them in open-oppacl and open-opdpacl. These pointe...

The vulnerability of the op_release() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the oprelease function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2023-53241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: call oprelease, even when opfunc returns an error For ops with trivial replies, nfsd4encodeoperation will shortcut most of the encoding work and skip to...

CVE-2023-53241: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: nfsd: call oprelease, even when opfunc returns an error For ops with "trivial" replies, nfsd4encodeoperation will shortcut most of the encoding work and skip to just marshalling up the status. One of the things it skips is callin...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not calling oprelease when an operator function returns an error, which could lead to a memory leak...