CVE-2026-22980: linux kernel from 3.18 (inclusive), before 5.10.248 (exclusive), from 5.11 (inclusive), before 5.15.198 (exclusive)…

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ca97360860eb02e3ae4ba42c19b439a0fcecbf06, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before e8bfa2401d4c51eca6e48e9b33c798828ca9df61, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 34eb22836e0cdba093baac66599d68c4cd245a9d, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 06600719d0f7a723811c45e4d51f5b742f345309, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ba4811c8b433bfa681729ca42cc62b6034f223b0, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 53f07d095e7e680c5e4569a55a019f2c0348cdc6, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 2857bd59feb63fcf40fe4baf55401baea6b4feb4
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/netns.h, fs/nfsd/nfs4state.c, fs/nfsd/nfsctl.c, fs/nfsd/state.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.