1581 matches found
EUVD-2026-76583
In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp-mask nfsd3procsetacl calls setposixacl unconditionally for both ACLTYPEACCESS and ACLTYPEDEFAULT, passing argp-aclaccess and argp-acldefault verbatim. The NFSv3 ACL decoder only populates those...
CVE-2026-89664
CVE-2026-89664 affects the Linux kernel NFS daemon (nfsd) and causes a memory leak of refcounted POSIX ACL objects. The leak occurs when malformed NFSv4 OPEN compound operations carrying valid POSIX ACL attributes trigger a short-circuit path in nfsd4_open_omfg() where nfsd4_open() is never invok...
CVE-2026-89664 nfsd: release OPEN-decoded posix ACLs via op_release
In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via oprelease nfsd4decodecreatehow4 calls nfsd4decodefattr4, which allocates refcounted struct posixacl objects via posixaclalloc and stores them in open-oppacl and open-opdpacl. These pointe...
PT-2026-90354
In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTR KILL SUID/ATTR KILL...
PT-2026-90411
In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4 decode posixacl reads a u32 entry count off the wire and passes it straight to posix acl alloc and sort pacl range. The latter is an On^2 bubble sort, so a client-chosen...
PT-2026-90380
In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op release nfsd4 decode createhow4 calls nfsd4 decode fattr4, which allocates refcounted struct posix acl objects via posix acl alloc and stores them in open-op pacl and open-op dpacl...
kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race
A flaw was found in the Linux kernel's CPU timer functionality. A race condition, which is a timing issue between different operations, can occur when a process attempts to delete a timer while another operation is still trying to access it. This can lead to a Use-After-Free UAF vulnerability,...
python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination
A flaw was found in the Python tarfile module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX Portable Operating System Interface platforms. This occurs when processing a specially crafted archive containing member names...
CVE-2026-19672
A flaw was found in the Python tarfile module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX Portable Operating System Interface platforms. This occurs when processing a specially crafted archive containing member names...
CVE-2025-30156
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...
CVE-2026-58094 TOCTOU race in POSIX shared memory large page configuration
The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...
FreeBSD : FreeBSD -- TOCTOU race in POSIX shared memory large page configuration (ef63188f-a0ff-11f1-ae1f-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ef63188f-a0ff-11f1-ae1f-bc241121aa0a advisory. The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098667)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098667 advisory. A flaw was found in the filelockinit in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number o...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098921)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098921 advisory. In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership chown and group chgrp...
BIT-PYTHON-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination
The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...
BIT-PYTHON-MIN-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination
The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...
BIT-LIBPYTHON-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination
The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: nfs: fixed the acl memory leak in posixaclcreate When reviewing another nfs xfstests report, I found that errors related to acl and defaultACL in nfs3proccreate and nfs3procmknod might be exposed. These issues need to be...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ksmbd: A possible reference count leak in smb2open has been fixed. The reference count of ACLs will cause a leak when memory allocation fails. This issue has been addressed by adding the missing posixaclrelease function...
