CVE-2026-89700

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds (OOB) read occurs in the Linux kernel when a caller with CAP NET ADMIN privileges sends a 16-byte NFSD A SOCK ADDR with sa family set to AF INET6. This is possible because nfsd sock nl policy defines NFSD A SOCK ADDR as a binary attribute without a minimum length. The issue affects the nfsd nl listener set doit() function, which used an insufficient length check for AF INET6 addresses. This leads to a 12-byte OOB read across the rpc cmp addr port(), svc find listener(), and kernel bind() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.