Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-89704 | In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop _nfsd_copy_file_rang | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89699 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4_decode_create() acce | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89697 | In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89696 | In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFI | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89694 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLO | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89684 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_state nfs4_alloc_init_cpntf_state( | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89674 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer si | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89673 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo nfsd4_ff_encode_ge | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89669 | In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() f | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89665 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr deco | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89663 | In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify s | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89662 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89656 | In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89655 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock list_fo | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89653 | In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap expor | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89650 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89649 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build_xattrs() __build_xattrs() decodes the | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89643 | In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove audit_del_rule( | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89628 | In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: clamp eeprom debugfs read to bytes actually received picolcd_debu | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-89627 | In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat_report_event() | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
About
-
Send Feedback to @ubuntu_updates
