Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 20

Количество 20

ubuntu логотип

CVE-2026-22980

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is set ...

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2026-22980

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is set ...

CVSS3: 4.4
EPSS: Низкий
nvd логотип

CVE-2026-22980

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is se

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2026-22980

8 месяцев назад

nfsd: provide locking for v4_end_grace

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2026-22980

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-334x-45wh-5m94

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2026-11546

11 месяцев назад

Уязвимость компонента nfsd/netns.h ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20260918-80-0141

около 2 месяцев назад

Уязвимость kernel-lt

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20260918-73-0125

около 2 месяцев назад

Уязвимость kernel-lt

CVSS3: 7.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3820

9 месяцев назад

ALT-PU-2026-3820: package `kernel-image-un-def` update to version 6.1.161-alt1

CVSS3: 8
EPSS: Низкий
oracle-oval логотип

ELSA-2026-50144

8 месяцев назад

ELSA-2026-50144: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2026-3159

9 месяцев назад

ALT-PU-2026-3159: package `kernel-image-rt` update to version 5.10.248-alt1.rt143

CVSS3: 8.2
EPSS: Низкий
altlinux логотип

ALT-PU-2026-2816

9 месяцев назад

ALT-PU-2026-2816: package `kernel-image-std-def` update to version 5.10.248-alt1

CVSS3: 8.2
EPSS: Низкий
oracle-oval логотип

ELSA-2026-50145

8 месяцев назад

ELSA-2026-50145: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20416-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-3601

9 месяцев назад

ALT-PU-2026-3601: package `kernel-image-6.12` update to version 6.12.68-alt1

CVSS3: 8.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3600

9 месяцев назад

ALT-PU-2026-3600: package `kernel-image-rt` update to version 6.12.68-alt1

CVSS3: 8.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-6044

7 месяцев назад

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-1529

10 месяцев назад

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-9924

5 месяцев назад

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-22980

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is set ...

CVSS3: 7.8
0%
Низкий
10 месяцев назад
redhat логотип
CVE-2026-22980

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is set ...

CVSS3: 4.4
0%
Низкий
10 месяцев назад
nvd логотип
CVE-2026-22980

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is se

CVSS3: 7.8
0%
Низкий
10 месяцев назад
msrc логотип
CVE-2026-22980

nfsd: provide locking for v4_end_grace

CVSS3: 7.8
0%
Низкий
8 месяцев назад
debian логотип
CVE-2026-22980

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 7.8
0%
Низкий
10 месяцев назад
github логотип
GHSA-334x-45wh-5m94

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace() is also called by the landromat work queue and this doesn't require locking as server shutdown will stop the work and wait for it before freeing anything that nfsd4_end_grace() might access. However, we must be sure that writing to v4_end_grace doesn't restart the work item after shutdown has already waited for it. For this we add a new flag protected with nn->client_lock. It is set only while it is safe to make client tracking calls, and v4_end_grace only schedules work while the flag is...

CVSS3: 7.8
0%
Низкий
10 месяцев назад
fstec логотип
BDU:2026-11546

Уязвимость компонента nfsd/netns.h ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
0%
Низкий
11 месяцев назад
redos логотип
ROS-20260918-80-0141

Уязвимость kernel-lt

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
redos логотип
ROS-20260918-73-0125

Уязвимость kernel-lt

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
altlinux логотип
ALT-PU-2026-3820

ALT-PU-2026-3820: package `kernel-image-un-def` update to version 6.1.161-alt1

CVSS3: 8
9 месяцев назад
oracle-oval логотип
ELSA-2026-50144

ELSA-2026-50144: Unbreakable Enterprise kernel security update (IMPORTANT)

8 месяцев назад
altlinux логотип
ALT-PU-2026-3159

ALT-PU-2026-3159: package `kernel-image-rt` update to version 5.10.248-alt1.rt143

CVSS3: 8.2
9 месяцев назад
altlinux логотип
ALT-PU-2026-2816

ALT-PU-2026-2816: package `kernel-image-std-def` update to version 5.10.248-alt1

CVSS3: 8.2
9 месяцев назад
oracle-oval логотип
ELSA-2026-50145

ELSA-2026-50145: Unbreakable Enterprise kernel security update (IMPORTANT)

8 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:20416-1

Security update for the Linux Kernel

8 месяцев назад
altlinux логотип
ALT-PU-2026-3601

ALT-PU-2026-3601: package `kernel-image-6.12` update to version 6.12.68-alt1

CVSS3: 8.8
9 месяцев назад
altlinux логотип
ALT-PU-2026-3600

ALT-PU-2026-3600: package `kernel-image-rt` update to version 6.12.68-alt1

CVSS3: 8.8
9 месяцев назад
altlinux логотип
ALT-PU-2026-6044

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
7 месяцев назад
altlinux логотип
ALT-PU-2026-1529

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
10 месяцев назад
altlinux логотип
ALT-PU-2026-9924

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад

Уязвимостей на страницу