CVE-2026-53392

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

PT-2026-61097

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff layout alloc lseg decodes the filehandle-version array count from the flexfiles layout body. The value is used as the count for kzalloc objs, and the current code only...