CVE 2026 document archive · 79
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 79 / 264
- CVE-2026-89712kernel: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
- CVE-2026-89711kernel: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
- CVE-2026-89710kernel: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
- CVE-2026-89709kernel: lockd, nfsd: RCU-protect nlmsvc_ops dispatch
- CVE-2026-89708kernel: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
- CVE-2026-89707kernel: nfsd: release path refs on follow_down() error
- CVE-2026-89706kernel: nfsd: Reset write verifier when async COPY writeback fails
- CVE-2026-89705kernel: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths
- CVE-2026-89704kernel: nfsd: sample writeback error cursor before async COPY loop
- CVE-2026-89703kernel: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
- CVE-2026-89702kernel: nfsd: size fh_verify server sockaddr slot by xpt_locallen
- CVE-2026-89701kernel: nfsd: validate nseconds in TIME_DELEG decode paths
- CVE-2026-89700kernel: nfsd: validate sockaddr length per family in listener_set
- CVE-2026-89699kernel: nfsd: validate symlink target length in NFSv4 CREATE
- CVE-2026-89698kernel: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage
- CVE-2026-89697kernel: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
- CVE-2026-89696kernel: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
- CVE-2026-89695kernel: nfsd: cap decoded POSIX ACL count to bound sort cost
- CVE-2026-89694kernel: nfsd: check client ownership when cancelling a copy-notify stateid
- CVE-2026-89693kernel: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
- CVE-2026-89692kernel: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
- CVE-2026-89691kernel: nfsd: clear opcnt on compound arg release to prevent OOB read
- CVE-2026-89690kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF
- CVE-2026-89689kernel: nfsd: don't free session slots that are still in use
- CVE-2026-89688kernel: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
- CVE-2026-89687kernel: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file
- CVE-2026-89686kernel: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
- CVE-2026-89685kernel: nfsd: fix clock domain mismatch in clients_still_reclaiming()
- CVE-2026-89684kernel: nfsd: fix cpntf publish race in nfs4_init_cp_state
- CVE-2026-89683kernel: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup
- CVE-2026-89682kernel: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net
- CVE-2026-89681kernel: nfsd: fix layout fence worker double-reference race
- CVE-2026-89680kernel: nfsd: fix nfsd_file leak on inter-server COPY setup failure
- CVE-2026-89679kernel: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
- CVE-2026-89678kernel: nfsd: fix partial-write detection in nfsd_direct_write
- CVE-2026-89677kernel: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
- CVE-2026-89676kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
- CVE-2026-89675kernel: nfsd: fix UAF in async copy cancel and shutdown
- CVE-2026-89674kernel: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
- CVE-2026-89673kernel: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
- CVE-2026-89672kernel: nfsd: gate nfs2 setacl by argp->mask
- CVE-2026-89671kernel: nfsd: gate nfs3 setacl by argp->mask
- CVE-2026-89670kernel: nfsd: hold rcu across localio cmpxchg retry
- CVE-2026-89669kernel: nfsd: initialize copy-notify stateid before publishing it
- CVE-2026-89668kernel: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
- CVE-2026-89667kernel: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache
- CVE-2026-89666kernel: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
- CVE-2026-89665kernel: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
- CVE-2026-89664kernel: nfsd: release OPEN-decoded posix ACLs via op_release
- CVE-2026-89663kernel: nfsd: revoke copy-notify stateids before dropping their reference