Lucene search
+L

14 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-89543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix use-after-free in rpcclnthandleevent and rpcclntremovepipedir Normal client creation goes through rpcsetuppipedir, which records clnt-pipefssb, but...

6.2AI score0.00209EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/11 8:19 p.m.•11 views

AZL-100283 CVE-2026-89543 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in rpcclnthandleevent and rpcclntremovepipedir Normal client creation goes through rpcsetuppipedir, which records clnt-pipefssb, but the mount-event path in rpcclnthandleevent calls rpcsetuppipedirsb...

6.3AI score0.00209EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/11 8:19 p.m.•13 views

CVE-2026-89543

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in rpcclnthandleevent and rpcclntremovepipedir Normal client creation goes through rpcsetuppipedir, which records clnt-pipefssb, but the mount-event path in rpcclnthandleevent calls rpcsetuppipedirsb...

6.4AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/11 8:19 p.m.•7 views

UBUNTU-CVE-2026-89543

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in rpcclnthandleevent and rpcclntremovepipedir Normal client creation goes through rpcsetuppipedir, which records clnt-pipefssb, but the mount-event path in rpcclnthandleevent calls rpcsetuppipedirsb...

6.5AI score0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/11 7:44 p.m.•26 views

CVE-2026-89543 sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in rpcclnthandleevent and rpcclntremovepipedir Normal client creation goes through rpcsetuppipedir, which records clnt-pipefssb, but the mount-event path in rpcclnthandleevent calls rpcsetuppipedirsb...

0.00209EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•5 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: The pin mechanism for the upper rpcclnt across the TLS-connected connectworker. The TLS connection process involves a use-after-free: Nothing pinning the upper rpcclnt occurs during the delayed connectworker. The xsconnec...

9.8CVSS5.8AI score0.00652EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/08/22 12:54 a.m.•13 views

SUSE CVE-2026-72317

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworker. xsconnect stores task-tkclient in sockxprt::clnt as a raw pointer...

7.8CVSS5.6AI score0.00652EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/18 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-72317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworke...

9.8CVSS7.9AI score0.00652EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/15 6:22 a.m.•9 views

CVE-2026-72317

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworker. xsconnect stores task-tkclient in sockxprt::clnt as a raw pointer...

9.8CVSS0.00652EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/15 6:22 a.m.•16 views

UBUNTU-CVE-2026-72317

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworker. xsconnect stores task-tkclient in sockxprt::clnt as a raw pointer...

9.8CVSS5.4AI score0.00652EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/08/15 5:55 a.m.•20 views

EUVD-2026-59216

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworker. xsconnect stores task-tkclient in sockxprt::clnt as a raw pointer...

5.4AI score0.00652EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/15 5:55 a.m.•37 views

CVE-2026-72317 SUNRPC: pin upper rpc_clnt across the TLS connect_worker

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworker. xsconnect stores task-tkclient in sockxprt::clnt as a raw pointer...

9.8CVSS5.5AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/08/15 5:55 a.m.•26 views

CVE-2026-72317 SUNRPC: pin upper rpc_clnt across the TLS connect_worker

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworker. xsconnect stores task-tkclient in sockxprt::clnt as a raw pointer...

9.8CVSS0.00652EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/15 5:55 a.m.•62 views

CVE-2026-72317

In the Linux kernel SUNRPC TLS connect path, a use-after-free occurs because upper rpc_clnt is not pinned across the delayed TLS connect_worker. The TLS handshake worker xs_tcp_tls_setup_socket() reads saved fields from a freed rpc_clnt when a handshake fails, leading to a refcount underflow. The...

9.8CVSS5.4AI score0.00652EPSS
SaveExploits0References5
Rows per page
Query Builder