CVE-2026-64066

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...

EUVD-2026-45640

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream-subrequests locklessly The list of subrequests attached to stream-subrequests is accessed without locks by netfscollectreadresults and netfscollectwriteresults, and then they acce...

PT-2026-61383

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs read to pagecache function where the system fails to pause the generation of new subrequests when a previously issued subrequest fails. Recommendations At th...

PT-2026-61386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the cancellation of Direct I/O DIO and single read subrequests is handled incorrectly. When preparing a new subrequest for a read fails, the...

PT-2026-61385

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where locking is missing when adding new subrequests. Specifically, the functions netfs retry read subrequests and netfs retry write stream fail to...

PT-2026-61384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the list of subrequests attached to stream-subrequests is accessed without locks by the functions netfs collect read results and netfs collec...

parse-server: Server option routeAllowList is bypassable through batch sub-requests

Impact The routeAllowList server option restricts external client access to a configured list of REST API routes. The check is only enforced as Express middleware against the outer HTTP request URL, so the /batch handler dispatches each sub-request to the internal router without re-running the...

GHSA-6H46-9JF5-Q59X Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes

Description When a firewall is configured with form-login or any authenticator using DefaultAuthenticationFailureHandler and the failureforward: true option, the handler reads the failurepath parameter from the failing login request and uses it as the path of an internal subrequest dispatched...

CVE-2026-31435

A flaw was found in the Linux kernel's netfs component. Under certain circumstances, during a read retry operation, the system may incorrectly abandon subrequests. This issue arises because a pointer subreq used in the abandonment process can be uninitialized or point to invalid memory. An attack...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013709 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the...

UBUNTU-CVE-2025-71201

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read result collection for buffered reads seems to run ahead of the completion of subrequests under some circumstances, as can be seen in the following log snippet:...

kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the non-cancellation of copy when cache is temporarily disabled When the caching for a cookie is temporarily disabled e.g. due to a DIO write on that file, future copying to the cache for that file is disabled until al...

DEBIAN-CVE-2023-53711

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the head before we can retransmit a request. If the head was not on the commit lists, because the server wrote it synchronously, we sti...

CVE-2023-53711

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the head before we can retransmit a request. If the head was not on the commit lists, because the server wrote it synchronously, we sti...

UBUNTU-CVE-2023-53711

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the head before we can retransmit a request. If the head was not on the commit lists, because the server wrote it synchronously, we sti...

CVE-2023-53711 NFS: Fix a potential data corruption

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the head before we can retransmit a request. If the head was not on the commit lists, because the server wrote it synchronously, we sti...

CVE-2023-53711 NFS: Fix a potential data corruption

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the head before we can retransmit a request. If the head was not on the commit lists, because the server wrote it synchronously, we sti...

CVE-2023-53711

CVE-2023-53711: Linux kernel NFS data corruption fix Context: The vulnerability affects the Linux kernel’s NFS client handling, where subrequests must be joined back into the head before retransmitting a request. If the head was not on the commit lists because the server wrote it synchronously, i...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly joining subrequests, which could lead to data corruption...

Linux Distros Unpatched Vulnerability : CVE-2025-21988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/netfs/readcollect: add to next-prevdonated If multiple subrequests donate data to the same next request depending on the subrequest completion order, each of...