CVE-2026-105516
No scoreFix available
nfs-ganesha: 9P TWALK component count stack buffer overflow
What each source reports
OSVUBUNTU-CVE-2026-105516 No score
nfs-ganesha: 9P TWALK component count stack buffer overflow
- Record
UBUNTU-CVE-2026-105516- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nfs-ganeshaDebian:12 |
All versions, plus listed versions 4.3-104.3-114.3-24.3-34.3-4 Show 32 moreShow less4.3-54.3-64.3-74.3-84.3-95.9-15.9-25.9-35.9-45.9-55.9-5~bpo12+16.5-16.5-26.5-36.5-46.5-56.5-66.5-6~bpo13+16.5-76.5-7~bpo13+16.5-86.5-8~bpo13+17.0-17.0-27.3-19.13-19.14-19.14-1~bpo13+19.14-29.6-19.6-1~bpo13+19.6-2 |
None known |
nfs-ganeshaDebian:13 |
All versions, plus listed versions 6.5-56.5-66.5-6~bpo13+16.5-76.5-7~bpo13+1 Show 12 moreShow less6.5-86.5-8~bpo13+17.0-17.0-27.3-19.13-19.14-19.14-1~bpo13+19.14-29.6-19.6-1~bpo13+19.6-2 |
None known |
nfs-ganeshaDebian:14 |
before 9.14-2, plus listed versions 6.5-56.5-66.5-6~bpo13+16.5-76.5-7~bpo13+1 Show 11 moreShow less6.5-86.5-8~bpo13+17.0-17.0-27.3-19.13-19.14-19.14-1~bpo13+19.6-19.6-1~bpo13+19.6-2 |
9.14-2 |
nfs-ganeshaUbuntu:18.04:LTS |
All versions, plus listed versions 2.4.5-22.5.2-12.5.4-12.6.0-2 |
None known |
nfs-ganeshaUbuntu:20.04:LTS |
All versions, plus listed versions 2.7.6-12.7.6-22.7.6-33.0.3-0ubuntu13.0.3-0ubuntu23.0.3-0ubuntu33.0.3-0ubuntu3.13.0.3-0ubuntu3.2 |
None known |
nfs-ganeshaUbuntu:22.04:LTS |
All versions, plus listed versions 3.4-1ubuntu33.4-1ubuntu43.4-2ubuntu13.5-13.5-1build13.5-1ubuntu1 |
None known |
nfs-ganeshaUbuntu:24.04:LTS |
All versions, plus listed versions 4.3-24.3-54.3-84.3-8build14.3-8ubuntu1 |
None known |
nfs-ganeshaUbuntu:26.10 |
All versions, plus listed versions 6.5-89.14-1 |
None known |
nfs-ganeshaUbuntu:26.04:LTS |
All versions, plus listed versions 6.5-56.5-66.5-76.5-8 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-105516 is a vulnerability with no CVSS score yet in nfs-ganesha, published October 9, 2026. No source lists public exploit code. Fixed in nfs-ganesha 9.14-2.