Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-89676

Опубликовано: 14 сент. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4_init_copy_state() before dup_copy_fields(), so the s2s_cp_stateids IDR was pointed at &u->copy->cp_stateid -- memory in the per-rqstp COMPOUND buffer that is reused by the next request. dup_copy_fields() copies only the value into async_copy, so the IDR slot dangled at the transient buffer for the whole background copy. Any IDR walker then dereferences reused request memory: the laundromat reads cs_type from it and, if the bytes look like an expired NFS4_COPYNOTIFY_STID, follows into refcount_dec()/idr_remove()/kfree() on garbage; manage_cpntf_state() has the same exposure via idr_find(). Duplicate the fields first, then register the stateid on the stable async_copy. result->cb_stateid is unchanged.

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.3
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.3

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-aws-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-aws-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-aws-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

ignored

superseded by linux-azure-5.3
esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-azure-6.14
resolute

DNE

upstream

ignored

superseded by linux-azure-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.3
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.3

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

ignored

superseded by linux-azure-fde-5.15
jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-fde-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-fde-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

replaced by linux-azure-6.5
noble

DNE

resolute

DNE

upstream

ignored

replaced by linux-azure-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
bluefield/jammy

needs-triage

bluefield/noble

needs-triage

devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips-updates/xenial

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

fips/xenial

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

ignored

superseded by linux-gcp-5.3
esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-gcp-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-gcp-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-gcp-6.14
resolute

DNE

upstream

ignored

superseded by linux-gcp-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-gcp-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-gcp-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-gke-5.0
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gke-5.0

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-hwe-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-hwe-6.14
resolute

DNE

upstream

ignored

superseded by linux-hwe-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-hwe-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-hwe-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

ignored

superseded by linux-hwe
esm-infra/bionic

ignored

superseded by linux-hwe-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by Ubuntu Pro ppa version
noble

DNE

realtime/jammy

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

replaced by linux-hwe-6.14
resolute

DNE

upstream

ignored

replaced by linux-hwe-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

end of kernel support
resolute

DNE

upstream

ignored

end of kernel support

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-nvidia-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-nvidia-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-nvidia-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-nvidia-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.14
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-5.14

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

replaced by linux-hwe-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

replaced by linux-hwe-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.1
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.10
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-5.10

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.1
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.1

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-oem-6.14
resolute

DNE

upstream

ignored

superseded by linux-oem-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-oem-6.14
resolute

DNE

upstream

ignored

superseded by linux-oem-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.3
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.3

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oracle-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by Ubuntu Pro ppa version
realtime/noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

replaced by linux-raspi
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

replaced by linux-raspi

Показывать по

РелизСтатусПримечание
devel

needs-triage

jammy

ignored

superseded by Ubuntu Pro ppa version
noble

ignored

superseded by Ubuntu Pro ppa version
realtime/jammy

needs-triage

realtime/noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

realtime/noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

realtime/noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

realtime/jammy

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

ignored

superseded by linux-riscv-5.8
jammy

ignored

end of kernel support
noble

ignored

replaced by linux-riscv-6.14
resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-riscv-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-riscv-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-riscv-6.17
resolute

DNE

upstream

ignored

superseded by linux-riscv-6.17

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-riscv-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-riscv-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-starfive-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-starfive-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 38%
0.00448
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4_init_copy_state() before dup_copy_fields(), so the s2s_cp_stateids IDR was pointed at &u->copy->cp_stateid -- memory in the per-rqstp COMPOUND buffer that is reused by the next request. dup_copy_fields() copies only the value into async_copy, so the IDR slot dangled at the transient buffer for the whole background copy. Any IDR walker then dereferences reused request memory: the laundromat reads cs_type from it and, if the bytes look like an expired NFS4_COPYNOTIFY_STID, follows into refcount_dec()/idr_remove()/kfree() on garbage; manage_cpntf_state() has the same exposure via idr_find(). Duplicate the fields first, then register the stateid on the stable async_copy. result->cb_stateid is unchanged.

CVSS3: 9.8
nvd
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4_init_copy_state() before dup_copy_fields(), so the s2s_cp_stateids IDR was pointed at &u->copy->cp_stateid -- memory in the per-rqstp COMPOUND buffer that is reused by the next request. dup_copy_fields() copies only the value into async_copy, so the IDR slot dangled at the transient buffer for the whole background copy. Any IDR walker then dereferences reused request memory: the laundromat reads cs_type from it and, if the bytes look like an expired NFS4_COPYNOTIFY_STID, follows into refcount_dec()/idr_remove()/kfree() on garbage; manage_cpntf_state() has the same exposure via idr_find(). Duplicate the fields first, then register the stateid on the stable async_copy. result->cb_stateid is unchanged.

CVSS3: 9.8
debian
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 9.8
github
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4_init_copy_state() before dup_copy_fields(), so the s2s_cp_stateids IDR was pointed at &u->copy->cp_stateid -- memory in the per-rqstp COMPOUND buffer that is reused by the next request. dup_copy_fields() copies only the value into async_copy, so the IDR slot dangled at the transient buffer for the whole background copy. Any IDR walker then dereferences reused request memory: the laundromat reads cs_type from it and, if the bytes look like an expired NFS4_COPYNOTIFY_STID, follows into refcount_dec()/idr_remove()/kfree() on garbage; manage_cpntf_state() has the same exposure via idr_find(). Duplicate the fields first, then register the stateid on the stable async_copy. result->cb_stateid is unchanged.

EPSS

Процентиль: 38%
0.00448
Низкий

9.8 Critical

CVSS3