CVE-2026-89700

CVE-2026-89700 affects the Linux kernel 's nfsd (NFS daemon) subsystem. The NFSD_A_SOCK_ADDR attribute in nfsd_sock_nl_policy was declared as a bare NLA_BINARY with no minimum length, and the validation check (nla_len

PT-2026-90416

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listener set nfsd sock nl policy declares NFSD A SOCK ADDR as a bare NLA BINARY attribute with no minimum length. A CAP NET ADMIN caller can send a 16-byte NFSD A SOCK ADDR with sa...