CVE-2026-89665

CVE-2026-89665 affects the Linux kernel 's NFSv2 server (nfsd ). The vulnerability is in svcxdr_decode_sattr(), where an out-of-range useconds value (a u32) is multiplied by NSEC_PER_USEC (1000). On ILP32 (32-bit) architectures the product overflows, wrapping to a seemingly valid tv_nsec value th...