Skip to contentLinux vulnerabilities
Newest
- linuxnfsd: don't free session slots that are still in useCVE-2026-89689Fix available9.8 Critical
- linuxnfsd: drop the stateid, not the stateowner, on seqid_op replay retryCVE-2026-89688Fix available9.8 Critical
- linuxnfsd: ensure nfsd_file_do_acquire() does not use a non-opened fileCVE-2026-89687Fix available7.5 High
- linuxnfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revokeCVE-2026-89686Fix available9.8 Critical
- linuxnfsd: fix clock domain mismatch in clients_still_reclaiming()CVE-2026-89685Fix available7.5 High
- linuxnfsd: fix cpntf publish race in nfs4_init_cp_stateCVE-2026-89684Fix available7.5 High
- linuxnfsd: fix dentry ref leak on V4ROOT export filehandle lookupCVE-2026-89683Fix available7.1 High
- linuxnfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_netCVE-2026-89682Fix available8.1 High
- linuxnfsd: fix layout fence worker double-reference raceCVE-2026-89681Fix available9.8 Critical
- linuxnfsd: fix nfsd_file leak on inter-server COPY setup failureCVE-2026-89680Fix available7.5 High
- linuxnfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrsCVE-2026-89679Fix available7.5 High
- linuxnfsd: fix partial-write detection in nfsd_direct_writeCVE-2026-89678Fix available7.5 High
- linuxnfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()CVE-2026-89677Fix available9.8 Critical
- linuxnfsd: fix stale s2s_cp_stateids IDR entry for async COPYCVE-2026-89676Fix available9.8 Critical
- linuxnfsd: fix UAF in async copy cancel and shutdownCVE-2026-89675Fix available9.8 Critical
- linuxnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutgetCVE-2026-89674Fix available9.8 Critical
- linuxnfsd: fix XDR padding calculation in ff_encode_getdeviceinfoCVE-2026-89673Fix available5.3 Medium
- linuxnfsd: gate nfs2 setacl by argp->maskCVE-2026-89672Fix available9.1 Critical
- linuxnfsd: gate nfs3 setacl by argp->maskCVE-2026-89671Fix available9.1 Critical
- linuxnfsd: hold rcu across localio cmpxchg retryCVE-2026-89670Fix available7.8 High
- linuxnfsd: initialize copy-notify stateid before publishing itCVE-2026-89669Fix available9.8 Critical
- linuxnfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()CVE-2026-89668Fix available7.8 High
- linuxnfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecacheCVE-2026-89667Fix available8.1 High
- linuxnfsd: reject out-of-range nseconds in NFSv3 SETATTR and create opsCVE-2026-89666Fix available5.3 Medium
- linuxnfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATECVE-2026-89665Fix available8.2 High
- linuxnfsd: release OPEN-decoded posix ACLs via op_releaseCVE-2026-89664Fix available7.5 High
- linuxnfsd: revoke copy-notify stateids before dropping their referenceCVE-2026-89663Fix available8.8 High
- linuxNFSD: Prevent lock owner use-after-free during client teardownCVE-2026-89662Fix available9.8 Critical
- linuxNFSD: Prevent post-shutdown use-after-free in unlock_filesystemCVE-2026-89661Fix availableNo score
- linuxNFSD: Prevent client use-after-free during admin state revocationCVE-2026-89660Fix available9.8 Critical
- linuxNFSD: Prevent client use-after-free during delegation revokeCVE-2026-89659Fix available9.8 Critical
- linuxNFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanupCVE-2026-89658Fix available9.8 Critical
- linuxlibceph: validate OSD extent maps before cursor advanceCVE-2026-89657Fix available7.5 High
- linuxlibceph: reject buckets with mismatched CRUSH idsCVE-2026-89656Fix available9.8 Critical
- linuxceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlockCVE-2026-89655Fix available9.8 Critical
- linuxceph: fix UAF in check_new_map() on session freed during unlockCVE-2026-89654Fix available9.8 Critical
- linuxceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decodeCVE-2026-89653Fix available9.8 Critical
- linuxceph: bound copied dentry name length in NFS export get_nameCVE-2026-89652Fix available9.8 Critical
- linuxceph: bound MDSCapAuth path and fs_name decode in handle_session()CVE-2026-89651Fix available9.8 Critical
- linuxceph: bound num_export_targets array for mds info v2/v3CVE-2026-89650Fix available9.1 Critical
- linuxceph: bound xattr value length in __build_xattrs()CVE-2026-89649Fix available9.1 Critical
- linuxceph: cap delegated inode count in ceph_parse_deleg_inos()CVE-2026-89648Fix available7.5 High
- linuxceph: do not repeat ceph_trim_dentries() if no progress possibleCVE-2026-89647Fix available7.5 High
- linuxceph: fix leaked inode reference on writeback abort at umountCVE-2026-89646Fix available7.8 High
- linuxbtrfs: drop recovered reloc root refs on recovery failureCVE-2026-89645Fix available5.3 Medium
- linuxbtrfs: fix extent map leak in NOCOW direct I/O writeCVE-2026-89644Fix available5.7 Medium
- linuxaudit: avoid dropping live tree ref on fsnotify rule autoremoveCVE-2026-89643Fix available9.8 Critical
- linuxcifs: call pagecache_isize_extended() in cifs_setsize() when extendingCVE-2026-89642Fix available4.8 Medium
- linuxcifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()CVE-2026-89641Fix available7.8 High
- linuxcifs: fix loff_t underflow in cifs_remap_file_range() when len == 0CVE-2026-89640Fix available7.1 High
- Show moreLoading…