Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-89692
The Linux kernel's NFS server component (nfsd) has a flaw where a failed attempt to queue a delegation recall leaves an internal flag permanently set, causing later recall attempts on the same delegation to be silently skipped, so conflicting file opens or locks can stall indefinitely. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems, such as in-vehicle infotainment or telematics back-end infrastructure that serves network file shares. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89691
The Linux kernel's NFS server component (nfsd) has a vulnerability where a stale counter can cause it to read beyond an intended memory buffer and leak adjacent kernel memory to userspace through a netlink status interface. An attacker able to trigger the specific error path could expose sensitive memory contents, though the advisory does not state a severity rating. This could be relevant where the Linux kernel NFS server is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89687
The Linux kernel's NFS server component (nfsd) has a vulnerability where a file handle could be used without the file actually being opened, though the advisory notes this is extremely unlikely to occur in practice. An attacker able to trigger this condition could potentially cause improper file access, but the advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89686
The Linux kernel's NFS server component (nfsd) contains a race condition in nfsd4_alloc_layout_stateid that can be triggered by two NFS clients, where one holds a delegation and another opens the same file to force a recall, and a concurrent LAYOUTGET request hits the race window. An attacker able to reach the NFS service could trigger a BUG_ON kernel crash, causing a denial of service. The advisory does not state a severity rating. This could be relevant where the Linux kernel NFS server is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89685
A flaw in the Linux kernel's NFS server (nfsd) causes a clock-domain mismatch in the clients_still_reclaiming() function, so a deadline comparison is always false. This lets any client keep the server stuck in a grace period indefinitely by sending CLAIM_PREVIOUS OPEN requests, blocking all non-reclaim operations for every other client. The advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89683
The Linux kernel's NFS server (nfsd) leaks a dentry reference when handling a crafted NFSv3 filehandle aimed at a V4ROOT export, and this leak occurs on every such request. Repeated requests could exhaust kernel memory and degrade or crash the affected system. The advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89684
A race condition in the Linux kernel's NFS server (nfsd) component could let a remote NFSv4.2 client crash the server by triggering a use of an incompletely initialized internal list entry. The vulnerability is rated as a denial-of-service issue in the kernel's NFS server code. This could be relevant where the Linux kernel's nfsd component is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89681
The Linux kernel's NFS server component contains a race condition in its layout fence worker that can cause a reference count to be taken twice and never released, leaking a layout stateid. An attacker able to trigger this race could cause a resource leak in the affected kernel, though the advisory does not state a severity rating. This could be relevant where the Linux kernel NFS server is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89680
A flaw in the Linux kernel's NFS server (nfsd) causes a file reference to leak when an inter-server COPY operation fails during setup, which over time can pin file, inode, and mount resources and potentially exhaust them. An attacker able to repeatedly trigger failed inter-server COPY requests could cause resource exhaustion on the affected system. The advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89678
A flaw in the Linux kernel's NFS server write path (nfsd_direct_write) means a partial write completing between 50 and 99 percent of a segment is not detected, so the next segment's data can be written at the wrong file offset and the NFS client is told more bytes were written than actually were. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems, for example in-vehicle infotainment or telematics back-end storage. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89677
The Linux kernel's NFS server (nfsd) has a flaw in nfsd4_create_file() where it could compose a file handle for the wrong dentry, potentially leading to a freed dentry being dereferenced later. An attacker able to trigger this condition could cause a use-after-free, which the advisory describes as a hypothetical but clearly unexpected scenario. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89673
The Linux kernel's NFS server component (nfsd) has a flaw in how it calculates padding when encoding flexfile GETDEVICEINFO replies, causing the declared data length to exceed the actual encoded data by 2 to 8 bytes on every such reply. This leaks stale reply-page memory content to the client and misaligns decoding of the subsequent version list. The advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89671
The Linux kernel's NFS server (nfsd) has a flaw where an NFSv3 SETACL request that omits certain ACL data can be misinterpreted as a request to delete the directory's ACLs, allowing a client to silently remove access or default ACLs. This could be relevant where Linux nfsd is deployed in automotive systems, such as in-vehicle infotainment or telematics back-end servers that export file systems over NFS. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89672
A flaw in the Linux kernel's NFS server (nfsd) NFSACL v2 SETACL handling could let a crafted request silently delete a directory's default ACL, because an omitted ACL field is treated the same as an explicit request to remove it. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems, for example in embedded or in-vehicle Linux-based systems that export NFS shares. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89670
The Linux kernel's NFS server component (nfsd) contains a use-after-free vulnerability in its local file-handle handling, where a reference count can be incremented on memory that has already been freed and recycled. An attacker could potentially exploit this race condition to cause the kernel to access freed memory, which may lead to a crash or other memory-corruption effects. The advisory does not state a severity rating. This could be relevant where the Linux kernel's nfsd subsystem is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89667
The Linux kernel's NFS server file cache has a race condition where a file can be left on a per-network dispose list with no thread to clean it up, leaking the file and its associated state. An attacker able to trigger this race could cause a resource leak in the affected kernel component. The advisory does not state a severity rating. This could be relevant where the Linux kernel NFS server component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89668
The Linux kernel's NFS server component (nfsd) had a flaw where a failed memory allocation during startup could leave debug filesystem entries pointing to freed memory. An attacker could potentially exploit this stale pointer condition, though the advisory does not state a specific severity rating. This could be relevant where the Linux kernel nfsd component is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89666
A flaw in the Linux kernel's NFS server (nfsd) lets a client send NFSv3 SETATTR, CREATE, MKDIR, SYMLINK or MKNOD requests with an out-of-range nanosecond timestamp value that is not properly validated. This can corrupt on-disk file metadata, causing incorrect stored timestamps and years on filesystems such as ext4 and XFS, and the fix rejects such requests with an NFS3ERR_INVAL error before any changes are made. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89665
The Linux kernel's NFS server component (nfsd) has a flaw in how it decodes NFSv2 SETATTR and CREATE requests, where an out-of-range microsecond timestamp value can wrap around and be accepted as valid on 32-bit systems. An attacker could exploit this to corrupt file timestamp data during request decoding, and the advisory does not assign a specific severity rating. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89663
The advisory describes a use-after-free vulnerability in the Linux kernel's NFS server (nfsd) copy-notify stateid handling, where concurrent revoke and lookup operations can free a stateid while a reader still holds a pointer, potentially causing a crash or memory corruption. This could be relevant where the Linux kernel's NFS server component is deployed in automotive systems, such as in-vehicle infotainment or telematics units that share files over NFS. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89664
The Linux kernel's NFS server component (nfsd) contains a memory leak where POSIX ACL objects allocated during malformed OPEN requests are never released, allowing an attacker to exhaust kernel memory over time. This is a denial-of-service issue in the kernel's NFS server code. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems, such as in-vehicle infotainment or telematics units that expose NFS services. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89661
The advisory describes a use-after-free in the Linux kernel's NFS server (NFSD) component, where a local administrator with CAP_SYS_ADMIN could trigger a memory-safety flaw by stopping the server and then writing to a specific control file, potentially causing a crash or memory corruption. This could be relevant where the Linux kernel's NFS server is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89650
A flaw in the Linux kernel's Ceph filesystem client lets a malicious or compromised Ceph monitor, or an attacker positioned on an unsigned or unencrypted session, send a crafted MDS map that causes the kernel to read out of bounds in memory. The impact is a kernel out-of-bounds read, not a leak of information to the attacker, and the advisory does not state a severity rating. This could be relevant where the Ceph client is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89649
A flaw in the Linux kernel's Ceph filesystem driver lets a malicious or compromised metadata server cause the kernel to copy more data than intended, potentially exposing adjacent kernel memory to a local user through a getxattr call. The issue is rated as a kernel heap information disclosure and is fixed by adding a bounds check that rejects the malformed data. This could be relevant where the Ceph kernel client is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89647
The advisory describes a Linux kernel fix in the Ceph filesystem client where a reclaim worker could busy-loop, repeatedly scanning directory leases and consuming CPU without freeing anything, which the patch stops by avoiding unnecessary retries and list churn. The stated impact is a denial-of-service style resource exhaustion (high CPU use and lock contention), not memory corruption or privilege escalation. This could be relevant where the Ceph client is deployed in automotive systems, but the advisory does not confirm any automotive deployment; confirm applicability through the product SBOM or dependency inventory.