NFSundown

Overview Proof-of-Concept exploit for NFSundown CVE-2025-38089. It can remotely trigger a kernel crash in an NFS server. Details A remote attacker can trigger a kernel null pointer dereference and crash the kernel by sending a specially crafted RPC request. This occurs due to improper handling of...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:99135 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: USB: serial: ioti: fix heap overflow in getmanufinfo CVE-2026-53196 kernel: net/iucv: fix use-after-free of a severed iucvpath CVE-2026-68140 kernel: sctp: avoid authenable sysctl UAF...

kernel: sunrpc: wait for in-flight TLS handshake callback when cancel loses race

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

kernel: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback

A flaw was found in the Linux kernel's sunrpc component, which affects TLS-enabled Network File System NFS servers. A race condition exists during the asynchronous TLS handshake process. A remote attacker could exploit this by closing a connection at a specific time, leading to memory corruption...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RHEL 9 : kernel (RHSA-2026:99135)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99135 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: USB: serial: ioti: fix heap...

kernel: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback

A flaw was found in the Linux kernel's sunrpc component, which affects TLS-enabled Network File System NFS servers. A race condition exists during the asynchronous TLS handshake process. A remote attacker could exploit this by closing a connection at a specific time, leading to memory corruption...

kernel: sunrpc: wait for in-flight TLS handshake callback when cancel loses race

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker

A flaw was found in the Linux kernel's SUN Remote Procedure Call SUNRPC implementation. A use-after-free vulnerability exists in the Transport Layer Security TLS connection path. When a TLS handshake fails, the client resource can be prematurely freed, leading to a subsequent attempt to access th...

kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call component. Improper handling of credential data during the decoding process can lead to a dangling pointer, a form of memory corruption. This issue may allow a remote attacker to cause a denial of service by triggering early...

RHEL 10 : kernel (RHSA-2026:98638)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98638 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: stream: fully roll bac...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151090 advisory. In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svcpoolforcpu svcsetnumthreads spreads the requested threads...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151107)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151107 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gsskrb5unwrapv2 against short tokens gsskrb5unwrapv2 reads the EC and RRC header...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151120 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cachecleaner before destroying a cachedetail sunrpcdestroycachedetail only...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151083 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssxdecoptionarray error path bugs Four coupled defects in the gssx XDR option-array...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151283 advisory. In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151285 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gsskrb5unwrapv2 sets buf-len to a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151175)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151175 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauthgss: enforce krb5 token minimum length svcauthgssunwrappriv validates only an upp...