96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,701–5,750 of 96,609 · page 115 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89714 | CVE-2026-89714 | In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails nfs4_server_com… |
| CVE-2026-89713 | CVE-2026-89713 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsd_setattr() checks whether a size upd… |
| CVE-2026-89712 | CVE-2026-89712 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock nfsd4_ssc_expire_umount… |
| CVE-2026-89711 | CVE-2026-89711 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check The header for commit e75b23f9e323 … |
| CVE-2026-89710 | CVE-2026-89710 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path When the server… |
| CVE-2026-8971 | CVE-2026-8971 CVSS 6.5mozilla | Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89709 | CVE-2026-89709 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsvc_ops is published by nfsd_lockd_init()… |
| CVE-2026-89708 | CVE-2026-89708 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown After a DESTROY… |
| CVE-2026-89707 | CVE-2026-89707 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error nfsd_cross_mnt() initializes a local struc… |
| CVE-2026-89706 | CVE-2026-89706 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn->writev… |
| CVE-2026-89705 | CVE-2026-89705 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch()… |
| CVE-2026-89704 | CVE-2026-89704 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop _nfsd_copy_file_range() sample… |
| CVE-2026-89703 | CVE-2026-89703 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations nfsd4_drop_revoked_s… |
| CVE-2026-89702 | CVE-2026-89702 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_locallen The nfsd_fh_verify and nfsd_fh_… |
| CVE-2026-89701 | CVE-2026-89701 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME_DELEG decode paths The xdrgen-based TIME_DELEG_ACCESS and… |
| CVE-2026-89700 | CVE-2026-89700 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listener_set nfsd_sock_nl_policy declares NF… |
| CVE-2026-8970 | CVE-2026-8970 CVSS 8.8mozilla | Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-89699 | CVE-2026-89699 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4_decode_create() accepts an unb… |
| CVE-2026-89698 | CVE-2026-89698 | In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage struct nfsd_genl_rqstp dec… |
| CVE-2026-89697 | CVE-2026-89697 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME… |
| CVE-2026-89696 | CVE-2026-89696 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIG_NFSD_V4_… |
| CVE-2026-89695 | CVE-2026-89695 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4_decode_posixacl() reads a u32 … |
| CVE-2026-89694 | CVE-2026-89694 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOAD_CANCEL … |
| CVE-2026-89693 | CVE-2026-89693 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the … |
| CVE-2026-89692 | CVE-2026-89692 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue nfsd_break_one_deleg() set… |
| CVE-2026-89691 | CVE-2026-89691 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4_release_compoundargs(… |
| CVE-2026-89690 | CVE-2026-89690 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_status UAF The rpc_status netlink dumpit wal… |
| CVE-2026-8969 | CVE-2026-8969 CVSS 8.1mozilla | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89689 | CVE-2026-89689 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4_sequence() can free the very s… |
| CVE-2026-89688 | CVE-2026-89688 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry In nfs4_preprocess_s… |
| CVE-2026-89687 | CVE-2026-89687 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file ->atomic_open is permi… |
| CVE-2026-89686 | CVE-2026-89686 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke nfsd4_alloc_la… |
| CVE-2026-89685 | CVE-2026-89685 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients_still_reclaiming() clients_still_reclaiming() … |
| CVE-2026-89684 | CVE-2026-89684 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_state nfs4_alloc_init_cpntf_state() publishe… |
| CVE-2026-89683 | CVE-2026-89683 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup nfsd_set_fh_dentry() leaks t… |
| CVE-2026-89682 | CVE-2026-89682 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net nfsd_file_dispose_l… |
| CVE-2026-89681 | CVE-2026-89681 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK_STRUCT… |
| CVE-2026-89680 | CVE-2026-89680 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() … |
| CVE-2026-8968 | CVE-2026-8968 CVSS 7.5mozilla | Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird… |
| CVE-2026-89679 | CVE-2026-89679 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs When a SETATTR requ… |
| CVE-2026-89678 | CVE-2026-89678 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd_direct_write nfsd_direct_write() walks a list o… |
| CVE-2026-89677 | CVE-2026-89677 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() dentry_create() can … |
| CVE-2026-89676 | CVE-2026-89676 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() … |
| CVE-2026-89675 | CVE-2026-89675 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used afte… |
| CVE-2026-89674 | CVE-2026-89674 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer size calcula… |
| CVE-2026-89673 | CVE-2026-89673 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo nfsd4_ff_encode_getdeviceinf… |
| CVE-2026-89672 | CVE-2026-89672 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2 SETACL path shares the decoder convent… |
| CVE-2026-89671 | CVE-2026-89671 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_setacl() calls set_posix_acl() unconditio… |
| CVE-2026-89670 | CVE-2026-89670 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: hold rcu across localio cmpxchg retry nfsd_file objects are freed via call_rcu (fil… |
| CVE-2026-8967 | CVE-2026-8967 CVSS 7.5mozilla | Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |