Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdhigh
cve-2026-89720
A flaw in the Linux kernel's UBIFS filesystem lets a crafted signed filesystem image trigger an out-of-bounds read during signature verification, because an incorrect length check accepts a signature length larger than the node actually holds. An attacker able to supply such an image could cause the kernel to read beyond an allocated buffer while parsing the signature, before the signature is cryptographically checked. The advisory does not state a severity rating. This could be relevant where UBIFS is deployed in automotive systems, for example on embedded or flash-based storage. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89718
The Linux kernel zram driver has a flaw where a device reset and reconfiguration with a smaller disk size can cause an out-of-bounds memory access during a writeback operation. An attacker able to trigger this race condition could potentially cause memory corruption or a system crash. The advisory does not state a severity rating. This could be relevant where the Linux kernel zram component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89709
The Linux kernel's lockd and nfsd components have a vulnerability where the nlmsvc_ops pointer is not properly protected during concurrent access, which can cause a crash or use-after-free if the nfsd module is unloaded while lockd is still using it. An attacker could potentially trigger a NULL pointer dereference or access freed memory, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89708
The Linux kernel's NFS server component (nfsd) contains a use-after-free vulnerability in how it handles callback sessions during session teardown, which could allow an attacker to access freed memory. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems, such as in-vehicle infotainment or telematics units that share files over NFS. The advisory does not state a severity rating. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89703
A use-after-free vulnerability exists in the Linux kernel's NFS server (nfsd) code, specifically in how it handles the freeing of revoked delegations. An attacker could potentially trigger this memory corruption issue, which the advisory treats as a security vulnerability requiring a fix. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89690
The Linux kernel's NFS server component (nfsd) contains a use-after-free vulnerability in which a concurrent NFSv4 compound completion can free a memory buffer while a netlink status dump is still reading it, potentially allowing an attacker to access or corrupt freed memory. The flaw is resolved by deferring the buffer free until after an RCU grace period, at the cost of holding completed operation buffers in memory slightly longer. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems, for example in embedded or telematics environments. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89689
The Linux kernel's NFS server component (nfsd) contains a use-after-free flaw in how it handles NFS session slots during a shrink operation, which can corrupt kernel memory. An attacker able to trigger the shrink path could cause memory corruption or a crash, and the advisory rates this as a vulnerability resolved by the kernel maintainers. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89688
The Linux kernel's NFS server component (nfsd) contains a flaw in how it handles certain replay retries, where it releases the wrong internal reference, potentially causing a memory reference count underflow and use-after-free. An attacker could potentially exploit this to cause a crash or other memory corruption, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89682
The Linux kernel's NFS server component (nfsd) contained a use-after-free vulnerability in its file-cache disposal logic, where a separately allocated structure could be freed during network namespace teardown while background shrinker, laundrette, and fsnotify callbacks were still using it. An attacker able to trigger this race could cause a use-after-free, which typically leads to a system crash or potentially memory corruption. The advisory does not state a severity rating. This could be relevant where the Linux kernel's nfsd subsystem is deployed in automotive systems, for example in embedded or telematics units running an NFS server. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89679
A flaw in the Linux kernel's NFS server (nfsd) can be triggered remotely by any NFSv4 client without authentication, causing a kernel crash (null pointer dereference) when a specially crafted SETATTR request is sent. The issue affects the nfsd component and is resolved by adding a missing null check. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89676
The Linux kernel's NFS server component has a memory-handling flaw in how it manages asynchronous COPY operations, where a state identifier can point to reused request memory instead of stable storage. An attacker able to trigger this condition could cause the system to act on invalid memory, potentially leading to a crash or memory corruption. The advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89675
The Linux kernel's NFS server (nfsd) contains a use-after-free vulnerability in its handling of asynchronous copy operations, where a teardown request racing the copy thread can free memory that is still in use. An attacker able to trigger this race could cause memory corruption or a crash of the affected system. The advisory does not state a severity rating. This could be relevant where the Linux kernel's nfsd component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89674
The Linux kernel's NFS server component (nfsd) contains a flaw in how it calculates buffer sizes when encoding layout data, which can cause it to write past the end of a reserved buffer or send uninitialized kernel memory to a client. An attacker could potentially exploit this to corrupt memory or leak sensitive kernel data, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89669
The Linux kernel's NFS server component (nfsd) has a use-after-free vulnerability in its copy-notify handling, where a race condition lets an attacker with a crafted request free a state entry while it is still being used. This could allow memory corruption or crashes on affected systems. The advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89662
A use-after-free vulnerability in the Linux kernel's NFS server (NFSD) component could allow an attacker to trigger a NULL pointer dereference during client teardown, potentially causing a crash or denial of service. This could be relevant where the Linux kernel's NFS server functionality is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89660
A use-after-free flaw in the Linux kernel's NFS server (NFSD) component could let an attacker crash or corrupt the system by racing an administrative state-revocation action against a client teardown. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89659
The advisory describes a use-after-free vulnerability in the Linux kernel's NFSD (network file system server) component, where a client's delegation can be freed while a revoke operation is still using it, potentially allowing an attacker to trigger memory corruption. This could be relevant where the Linux kernel's NFS server functionality is deployed in automotive systems, such as in-vehicle infotainment or telematics units that share files over a network. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89658
A use-after-free vulnerability in the Linux kernel's NFS server (NFSD) component could let an attacker crash or corrupt memory during NFSv4.0 revoked-state cleanup, when a periodic cleanup sweep races with a client teardown. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems, for example in embedded or telematics environments. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89657
A flaw in the Linux kernel's Ceph client (libceph) allows a malicious or compromised authenticated Ceph OSD peer to crash the kernel client by sending a malformed sparse-read reply that pushes the message-data cursor past the request buffer. The advisory does not confirm automotive deployment; this could be relevant where the Linux Ceph client is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89656
A flaw in the Linux kernel's Ceph storage subsystem (libceph) allows a malformed CRUSH map to cause an out-of-bounds memory write, which KASAN reports as a 4-byte slab write in bucket_perm_choose(). An attacker able to supply such a malformed map could corrupt kernel memory, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's Ceph client is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89655
The advisory describes a use-after-free race in the Linux kernel's Ceph filesystem client, where a capability flush entry can be freed by one code path while another is still iterating over it, potentially causing memory corruption or a crash. This could be relevant where the Linux kernel Ceph client is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89654
The Linux kernel Ceph filesystem client has a use-after-free flaw in check_new_map() where a session object can be freed by another thread during a brief window when a lock is released, causing the original thread to access freed memory. An attacker able to trigger this race could cause memory corruption or a system crash, though the advisory does not state a severity rating. This could be relevant where the Ceph kernel client is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89653
The Linux kernel Ceph filesystem client fails to validate monitor-supplied MDSMap export_targets ranks during map decoding, allowing an out-of-range rank to cause an out-of-bounds write in a fixed-size stack bitmap. An attacker controlling a Ceph monitor could potentially trigger memory corruption in the kernel. This could be relevant where the Linux kernel Ceph client is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89651
A flaw in the Linux kernel's Ceph filesystem client lets a malicious or compromised Ceph metadata server send a crafted session message that causes the client to read far beyond its allocated buffer, crashing the client. The issue is an out-of-bounds read in the handle_session() function during session setup, requiring no user interaction on the client side. This could be relevant where the Ceph kernel client is deployed in automotive systems, such as in-vehicle storage or telematics backends. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh
cve-2026-89652
A flaw in the Linux kernel's Ceph filesystem client lets a malicious or compromised Ceph metadata server overflow a fixed-size name buffer during NFS re-export of a CephFS mount, causing an out-of-bounds memory write (reported by KASAN). The issue is fixed by rejecting names longer than the allowed maximum before copying. This could be relevant where the Linux kernel's Ceph client is deployed in automotive systems, for example in embedded or telematics platforms that mount CephFS and re-export it over NFS. Confirm applicability through the product SBOM or dependency inventory.