9 matches found
SUSE CVE-2026-89690
In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in-flight svcrqst under rcureadlock and, for NFSv4 requests, reads opnums out of args-ops. But args-ops is a separate vmalloc buffer...
Linux Distros Unpatched Vulnerability : CVE-2026-89690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in- flight svcrqst under rcureadlock and, for NFSv4 requests,...
CVE-2026-89690
In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in-flight svcrqst under rcureadlock and, for NFSv4 requests, reads opnums out of args-ops. But args-ops is a separate vmalloc buffer...
UBUNTU-CVE-2026-89690
In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in-flight svcrqst under rcureadlock and, for NFSv4 requests, reads opnums out of args-ops. But args-ops is a separate vmalloc buffer...
CVE-2026-89690
In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in-flight svcrqst under rcureadlock and, for NFSv4 requests, reads opnums out of args-ops. But args-ops is a separate vmalloc buffer...
CVE-2026-89690
CVE-2026-89690 is a use-after-free in the nfsd (NFS server daemon) component of the Linux kernel. The rpc_status netlink dumpit reads operation numbers from args->ops[] under rcu_read_lock, but that vmalloc buffer is freed synchronously via vfree() in nfsd4_release_compoundargs() without being...
CVE-2026-89690 nfsd: defer vfree of compound ops to fix rpc_status UAF
In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in-flight svcrqst under rcureadlock and, for NFSv4 requests, reads opnums out of args-ops. But args-ops is a separate vmalloc buffer...
CVE-2026-89690: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpcstatus UAF The rpcstatus netlink dumpit walks every in-flight svcrqst under rcureadlock and, for NFSv4 requests, reads opnums out of args-ops. But args-ops is a separate vmalloc buffer...
CVE-2023-30636: Allocation of Resources Without Limits or Throttling
TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error, with RpcStatus UNAVAILABLE for "not leader" upon an attempt to start a node in a situation where the context deadline is exceeded...