94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,401–5,450 of 94,138 · page 109 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89688 | CVE-2026-89688 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry In nfs4_preprocess_s… |
| CVE-2026-89687 | CVE-2026-89687 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file ->atomic_open is permi… |
| CVE-2026-89686 | CVE-2026-89686 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke nfsd4_alloc_la… |
| CVE-2026-89685 | CVE-2026-89685 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients_still_reclaiming() clients_still_reclaiming() … |
| CVE-2026-89684 | CVE-2026-89684 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_state nfs4_alloc_init_cpntf_state() publishe… |
| CVE-2026-89683 | CVE-2026-89683 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup nfsd_set_fh_dentry() leaks t… |
| CVE-2026-89682 | CVE-2026-89682 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net nfsd_file_dispose_l… |
| CVE-2026-89681 | CVE-2026-89681 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK_STRUCT… |
| CVE-2026-89680 | CVE-2026-89680 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() … |
| CVE-2026-8968 | CVE-2026-8968 CVSS 7.5mozilla | Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird… |
| CVE-2026-89679 | CVE-2026-89679 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs When a SETATTR requ… |
| CVE-2026-89678 | CVE-2026-89678 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd_direct_write nfsd_direct_write() walks a list o… |
| CVE-2026-89677 | CVE-2026-89677 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() dentry_create() can … |
| CVE-2026-89676 | CVE-2026-89676 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() … |
| CVE-2026-89675 | CVE-2026-89675 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used afte… |
| CVE-2026-89674 | CVE-2026-89674 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer size calcula… |
| CVE-2026-89673 | CVE-2026-89673 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo nfsd4_ff_encode_getdeviceinf… |
| CVE-2026-89672 | CVE-2026-89672 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2 SETACL path shares the decoder convent… |
| CVE-2026-89671 | CVE-2026-89671 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_setacl() calls set_posix_acl() unconditio… |
| CVE-2026-89670 | CVE-2026-89670 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: hold rcu across localio cmpxchg retry nfsd_file objects are freed via call_rcu (fil… |
| CVE-2026-8967 | CVE-2026-8967 CVSS 7.5mozilla | Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89669 | CVE-2026-89669 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished in… |
| CVE-2026-89668 | CVE-2026-89668 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() nfsd_debugfs_init(… |
| CVE-2026-89667 | CVE-2026-89667 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC w… |
| CVE-2026-89666 | CVE-2026-89666 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops A client can send an N… |
| CVE-2026-89665 | CVE-2026-89665 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder conver… |
| CVE-2026-89664 | CVE-2026-89664 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op_release nfsd4_decode_createhow4() calls nfsd… |
| CVE-2026-89663 | CVE-2026-89663 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids li… |
| CVE-2026-89662 | CVE-2026-89662 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client() release… |
| CVE-2026-89661 | CVE-2026-89661 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem Writing a filesystem path… |
| CVE-2026-89660 | CVE-2026-89660 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a … |
| CVE-2026-8966 | CVE-2026-8966 CVSS 7.5mozilla | Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89659 | CVE-2026-89659 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds o… |
| CVE-2026-89658 | CVE-2026-89658 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40_clean_admi… |
| CVE-2026-89657 | CVE-2026-89657 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osd_client.c:osd_sparse_… |
| CVE-2026-89656 | CVE-2026-89656 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket data by ar… |
| CVE-2026-89655 | CVE-2026-89655 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock list_for_each_ent… |
| CVE-2026-89654 | CVE-2026-89654 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates … |
| CVE-2026-89653 | CVE-2026-89653 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets … |
| CVE-2026-89652 | CVE-2026-89652 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the M… |
| CVE-2026-89651 | CVE-2026-89651 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode in handle_session() handle_session() decod… |
| CVE-2026-89650 | CVE-2026-89650 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in fs/ceph/m… |
| CVE-2026-8965 | CVE-2026-8965 CVSS 7.5mozilla | Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89649 | CVE-2026-89649 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build_xattrs() __build_xattrs() decodes the MDS-suppl… |
| CVE-2026-89648 | CVE-2026-89648 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos() ceph_parse_deleg_inos() decode… |
| CVE-2026-89647 | CVE-2026-89647 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible ceph_cap_reclaim_work() … |
| CVE-2026-89646 | CVE-2026-89646 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort at umount ceph_dirty_folio() takes a … |
| CVE-2026-89645 | CVE-2026-89645 | In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During relocation recovery, eac… |
| CVE-2026-89644 | CVE-2026-89644 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_begin() calls btrfs_… |
| CVE-2026-89643 | CVE-2026-89643 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove audit_del_rule() is used … |