Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89700nfsd: validate sockaddr length per family in listener_set
- CVE-2026-89699nfsd: validate symlink target length in NFSv4 CREATE
- CVE-2026-89698nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage
- CVE-2026-89697nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
- CVE-2026-89696nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
- CVE-2026-89695nfsd: cap decoded POSIX ACL count to bound sort cost
- CVE-2026-89694nfsd: check client ownership when cancelling a copy-notify stateid
- CVE-2026-89693nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
- CVE-2026-89692nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
- CVE-2026-89691nfsd: clear opcnt on compound arg release to prevent OOB read
- CVE-2026-89690nfsd: defer vfree of compound ops to fix rpc_status UAF
- CVE-2026-89689nfsd: don't free session slots that are still in use
- CVE-2026-89688nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
- CVE-2026-89687nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file
- CVE-2026-89686nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
- CVE-2026-89685nfsd: fix clock domain mismatch in clients_still_reclaiming()
- CVE-2026-89684nfsd: fix cpntf publish race in nfs4_init_cp_state
- CVE-2026-89683nfsd: fix dentry ref leak on V4ROOT export filehandle lookup
- CVE-2026-89682nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net
- CVE-2026-89681nfsd: fix layout fence worker double-reference race
- CVE-2026-89680nfsd: fix nfsd_file leak on inter-server COPY setup failure
- CVE-2026-89679nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
- CVE-2026-89678nfsd: fix partial-write detection in nfsd_direct_write
- CVE-2026-89677nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
- CVE-2026-89676nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
- CVE-2026-89675nfsd: fix UAF in async copy cancel and shutdown
- CVE-2026-89674nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
- CVE-2026-89673nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
- CVE-2026-89672nfsd: gate nfs2 setacl by argp->mask
- CVE-2026-89671nfsd: gate nfs3 setacl by argp->mask