The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
NFSD: NFSv4 file creation neglects setting ACL
An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL (based on the mode bits) and not the ACL that was requested during file creation. This violates RFC 8881 section 6.4.1.3: "the ACL attribute is set as given".
The issue occurs in nfsd_create_setattr(), which calls nfsd_attrs_valid() to determine whether to call nfsd_setattr(). However, nfsd_attrs_valid() checks only for iattr changes and security labels, but not POSIX ACLs. When only an ACL is present, the function returns false, nfsd_setattr() is skipped, and the POSIX ACL is never applied to the inode.
Subsequently, when the client retrieves the ACL, the server finds no POSIX ACL on the inode and returns one generated from the file's mode bits rather than returning the originally-specified ACL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.248-247.988Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.201-140.219Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-staticUpgrade kernel-livepatch-6.1.161-183.298Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade perf6.12Upgrade python3-perfUpgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel-tools-develUpgrade kernel6.12-libbpfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel6.12-tools-develUpgrade bpftool6.12Upgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.64-87.122Upgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade bpftool6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Feb 20, 2026 | Jan 13, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 13, 2026 |
| Ubuntu | — | Upgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-5.15Upgrade linux-image-raspiUpgrade linux-image-realtime-6.17Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-6.17Upgrade linux-image-5.15.0-173-genericUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-generic-64k-6.17Upgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-24.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-5.15.0-173-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-24.04dUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1103-awsUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-virtual-6.17Upgrade linux-image-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-gkeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64kUpgrade linux-image-azure-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-oracle-6.17Upgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-6.17Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-6.17Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-genericUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.17.0-1012-awsUpgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-6.17.0-1013-azureUpgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-5.15 | Mar 17, 2026 | Jan 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub