enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
624 CVEsRSS
CVE-2026-89630High· 7.0⚖ disputedkernel: smb: client: restore the data_offset bound in is_valid_oplock_break() (CVE-2026-89630)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. An incorrect calculation of the `data_offset` bound in the `is_valid_oplock_break()` function can lead to a read overflow. This vulnerability allows a malicious SMB …
CVE-2026-89620High· 7.0kernel: HID: intel-thc-hid: intel-quickspi: validate report size before copy (CVE-2026-89620)
A flaw was found in the Linux kernel's HID Intel QuickSPI driver. A local attacker can exploit a heap buffer overflow by providing a specially crafted report through a `hidraw SET_REPORT/SET_FEATURE ioctl`. This allows the attacker to over…
CVE-2026-89619High· 7.0kernel: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer (CVE-2026-89619)
A flaw was found in the Linux kernel, specifically within the `intel-quickspi` driver. This vulnerability allows a malicious Human Interface Device (HID) to send an oversized report, which is then copied into a buffer without proper size v…
CVE-2026-89601Medium· 5.5⚖ disputedkernel: ext2: Fix lost inode updates for IS_SYNC inodes (CVE-2026-89601)
A flaw was found in the Linux kernel's ext2 filesystem. This vulnerability occurs in the `ext2_setsize()` and `ext2_xattr_set2()` functions, where inode updates for `IS_SYNC` inodes may be lost. This happens because the `sync_inode_metadat…
CVE-2026-89588Medium· 5.5⚖ disputedkernel: ACPI: APEI: GHES: fix ARM section length accounting after header (CVE-2026-89588)
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface (ACPI) APEI Generic Hardware Error Source (GHES) component. Incorrect length accounting in the `ghes_handle_arm_hw_error()` function can lead to the parser r…
CVE-2026-89584High· 7.0⚖ disputedkernel: block: validate user space vectors during extraction (CVE-2026-89584)
A flaw was found in the Linux kernel's block layer. This vulnerability arises from insufficient validation of user-space data structures (vectors) against the device's Direct Memory Access (DMA) alignment requirements. A local attacker cou…
CVE-2026-89581High· 7.0⚖ disputedkernel: bpf, x86: Fix per-CPU address resolution into an extended register (CVE-2026-89581)
A flaw was found in the Linux kernel's handling of Berkeley Packet Filter (BPF) programs on x86 architecture. An issue with how per-CPU addresses are resolved into extended registers can lead to incorrect memory access. A local attacker co…
CVE-2026-89580High· 7.0kernel: bpf: Disable preemption in __bpf_get_stack (CVE-2026-89580)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. A local attacker could exploit a timing issue in the `__bpf_get_stack` function. This occurs when a preemptible BPF program is scheduled out, allowing another t…
CVE-2026-89574Medium· 5.5⚖ disputedkernel: dm array: validate array block headers on read (CVE-2026-89574)
A flaw was found in the Linux kernel's device mapper (dm) array component. Insufficient validation of array block headers during read operations allows a local attacker to craft a malicious on-disk `nr_entries` value. This can lead to an o…
CVE-2026-89570High· 7.0⚖ disputedkernel: cxl/mce: Make the MCE notifier per-region (CVE-2026-89570)
A flaw was found in the Linux kernel's Compute Express Link (CXL) subsystem. Lifetime issues with the CXL Machine Check Exception (MCE) notifier can lead to NULL dereferences and use-after-free vulnerabilities in the MCE handler. This coul…
CVE-2026-89558High· 7.0⚖ disputedkernel: md/raid10: fix still_degraded being inverted in raid10_sync_request() (CVE-2026-89558)
A flaw was found in the Linux kernel's md/raid10 (RAID10) driver. This vulnerability occurs when a RAID10 array is in a degraded state and a device is being recovered while another mirror is still missing. Due to an inverted boolean value,…
CVE-2026-89537High· 7.0⚖ disputedkernel: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (CVE-2026-89537)
A flaw was found in the Linux kernel's SUNRPC implementation, specifically within the `gss_krb5_verify_mic_v2` function. A remote malicious Network File System (NFS) server could provide a specially crafted, short Kerberos Message Integrit…
CVE-2026-89530High· 7.0⚖ disputedkernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access (RDMA). A remote attacker can send a specially crafted network reply that is larger than expected. This can cau…
CVE-2026-89692Medium· 5.5⚖ disputedkernel: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue (CVE-2026-89692)
A flaw was found in the Linux kernel's Network File System (NFS) daemon, `nfsd`. This vulnerability occurs when a delegation recall operation fails, leaving a critical internal flag uncleared. This prevents subsequent attempts to break the…
CVE-2026-89691High· 7.0kernel: nfsd: clear opcnt on compound arg release to prevent OOB read (CVE-2026-89691)
A flaw was found in the Linux kernel's Network File System Daemon (nfsd) component. The nfsd4_release_compoundargs() function does not properly clear an internal counter (opcnt) when releasing a buffer. This oversight can lead to an out-of…
CVE-2026-89690High· 7.0kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
A flaw was found in the `nfsd` component of the Linux kernel. This vulnerability, a use-after-free, occurs when a specific memory buffer is prematurely released while another process is still trying to access it. This timing issue can lead…
CVE-2026-89689High· 7.0⚖ disputedkernel: nfsd: don't free session slots that are still in use (CVE-2026-89689)
A flaw was found in the Linux kernel's Network File System (NFS) daemon, `nfsd`. A remote attacker could exploit a use-after-free vulnerability in the `nfsd4_sequence()` function. This occurs when the system attempts to reduce the number o…
CVE-2026-89688High· 7.0⚖ disputedkernel: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (CVE-2026-89688)
A flaw was found in the Linux kernel's nfsd component. During a `seqid_op` replay retry, the system incorrectly handles reference counts for stateowners, leading to a reference count underflow and a use-after-free vulnerability. This issue…
CVE-2026-89686High· 7.0⚖ disputedkernel: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (CVE-2026-89686)
A flaw was found in the Linux kernel's Network File System Daemon (nfsd) for NFSv4 layouts. A race condition allows a remote attacker to trigger a kernel panic, leading to a Denial of Service (DoS). This occurs when the `nfsd4_alloc_layout…
CVE-2026-89682High· 7.0kernel: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net (CVE-2026-89682)
A flaw was found in the Linux kernel's NFS daemon (nfsd) component. The nfsd_file_dispose_list_delayed() function, responsible for deferring file disposal, uses a separately allocated structure for its freeme queue. During network namespac…
CVE-2026-89681High· 7.0⚖ disputedkernel: nfsd: fix layout fence worker double-reference race (CVE-2026-89681)
A flaw was found in the Linux kernel's nfsd component. A race condition in the layout fence worker can cause a double-reference to a layout stateid. This occurs because the workqueue core clears a pending flag prematurely, allowing a new w…
CVE-2026-89680High· 7.0⚖ disputedkernel: nfsd: fix nfsd_file leak on inter-server COPY setup failure (CVE-2026-89680)
A flaw was found in the Linux kernel's nfsd component. This vulnerability occurs when an inter-server COPY operation fails during its setup phase, leading to improper resource cleanup. Consequently, each failed operation results in a memor…
CVE-2026-89679Medium· 5.5kernel: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs (CVE-2026-89679)
A flaw was found in the Linux kernel's nfsd component. A remote attacker can exploit this by sending a specially crafted SETATTR request that includes specific delegation timestamp attributes and a special NFSv4 state ID. This triggers a n…
CVE-2026-89678High· 7.0kernel: nfsd: fix partial-write detection in nfsd_direct_write (CVE-2026-89678)
A flaw was found in the Linux kernel's Network File System (NFS) daemon (nfsd) component. The `nfsd_direct_write()` function, responsible for handling direct writes, incorrectly detects partial writes. This issue occurs because the logic f…
CVE-2026-89677High· 7.0⚖ disputedkernel: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() (CVE-2026-89677)
A flaw was found in the Linux kernel's Network File System Daemon (nfsd). When creating files, the `dentry_create()` function could return an unexpected directory entry (dentry). This could lead to a previously stored dentry being prematur…
CVE-2026-89675High· 7.0⚖ disputedkernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675)
A flaw was found in the Linux kernel's nfsd component. A race condition exists during asynchronous copy cancellation and shutdown operations, which can lead to a Use-After-Free (UAF) vulnerability. This allows an async copy object to be fr…
CVE-2026-89670High· 7.0kernel: nfsd: hold rcu across localio cmpxchg retry (CVE-2026-89670)
A flaw was found in the Linux kernel's Network File System Daemon (nfsd) component. A race condition exists in the `nfsd_open_local_fh()` function where an `nfsd_file` object can be freed and its memory recycled while another process attem…
CVE-2026-89668High· 7.0⚖ disputedkernel: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() (CVE-2026-89668)
A flaw was found in the `nfsd` component of the Linux kernel. The `nfsd_debugfs_init()` function is called before `nfsd4_init_slabs()`. If the slab allocation fails, the `nfsd_debugfs_exit()` cleanup function is bypassed, leaving orphaned …
CVE-2026-89664High· 7.0kernel: nfsd: release OPEN-decoded posix ACLs via op_release (CVE-2026-89664)
A flaw was found in the Linux kernel's Network File System Daemon (nfsd). When processing malformed NFSv4 OPEN compound operations that include valid Portable Operating System Interface (POSIX) Access Control List (ACL) attributes, the ker…
CVE-2026-89658High· 7.0⚖ disputedkernel: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (CVE-2026-89658)
A flaw was found in the Linux kernel's Network File System Daemon (NFSD). During NFSv4.0 revoked-state cleanup, a race condition can occur where a client's state identifier (stateid) reference does not properly prevent the client from bein…