Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/09/11 11:08 p.m.•14 views

CVE-2026-89691

A flaw was found in the Linux kernel's Network File System Daemon nfsd component. The nfsd4releasecompoundargs function does not properly clear an internal counter opcnt when releasing a buffer. This oversight can lead to an out-of-bounds read, allowing an attacker to access adjacent memory and...

7.1CVSS5.7AI score0.00125EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/09/11 8:19 p.m.•19 views

DEBIAN-CVE-2026-89691

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4releasecompoundargs resets args-ops to the inline iops8 array when the dynamically-allocated ops buffer is freed, but leaves args-opcnt at its original value whic...

7.1CVSS6.4AI score0.00125EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/09/11 8:19 p.m.•15 views

UBUNTU-CVE-2026-89691

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4releasecompoundargs resets args-ops to the inline iops8 array when the dynamically-allocated ops buffer is freed, but leaves args-opcnt at its original value whic...

7.1CVSS6.4AI score0.00125EPSS
SaveExploits0References9
CVE
CVE
•added 2026/09/11 7:46 p.m.•48 views

CVE-2026-89691

CVE-2026-89691 is an out-of-bounds read vulnerability in the Linux kernel's nfsd (Network File System Daemon) component. The nfsd4_release_compoundargs() function resets the args->ops pointer to the inline iops[8] array when the dynamically allocated buffer is freed, but fails to zero args-&gt...

7.1CVSS6.1AI score0.00125EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/11 7:46 p.m.•21 views

EUVD-2026-76603

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4releasecompoundargs resets args-ops to the inline iops8 array when the dynamically-allocated ops buffer is freed, but leaves args-opcnt at its original value whic...

6.1AI score0.00125EPSS
SaveExploits0References4
Rows per page
Query Builder