UBUNTU-CVE-2026-105516

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-105516
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-105516.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2026-105516
Upstream
  • CVE-2026-105516
Published
2026-10-09T00:00:00Z
Modified
2026-10-22T23:21:30Z
Severity
  • Ubuntu - medium
Summary
[none]
Details

nfs-ganesha: 9P TWALK component count stack buffer overflow

References

Affected packages

Ubuntu:18.04:LTS
nfs-ganesha

Package

Name
nfs-ganesha
Purl
pkg:deb/ubuntu/nfs-ganesha?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.4.5-2
2.5.2-1
2.5.4-1
2.6.0-2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "nfs-ganesha",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-ceph",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-gluster",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-gpfs",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-mem",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-mount-9p",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-nullfs",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-proxy",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-vfs",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "nfs-ganesha-xfs",
            "binary_version": "2.6.0-2"
        },
        {
            "binary_name": "python-nfs-ganesha",
            "binary_version": "2.6.0-2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-105516.json"
Ubuntu:20.04:LTS
nfs-ganesha

Package

Name
nfs-ganesha
Purl
pkg:deb/ubuntu/nfs-ganesha?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.7.6-1
2.7.6-2
2.7.6-3
3.*
3.0.3-0ubuntu1
3.0.3-0ubuntu2
3.0.3-0ubuntu3
3.0.3-0ubuntu3.1
3.0.3-0ubuntu3.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "nfs-ganesha",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-ceph",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-gluster",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-gpfs",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-mem",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-mount-9p",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-nullfs",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-proxy",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-rados-grace",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-vfs",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "nfs-ganesha-xfs",
            "binary_version": "3.0.3-0ubuntu3.2"
        },
        {
            "binary_name": "python3-nfs-ganesha",
            "binary_version": "3.0.3-0ubuntu3.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-105516.json"
Ubuntu:22.04:LTS
nfs-ganesha

Package

Name
nfs-ganesha
Purl
pkg:deb/ubuntu/nfs-ganesha?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.4-1ubuntu3
3.4-1ubuntu4
3.4-2ubuntu1
3.5-1
3.5-1build1
3.5-1ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "nfs-ganesha",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-ceph",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-gluster",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-gpfs",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-mem",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-mount-9p",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-nullfs",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-proxy",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-rados-grace",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-rgw",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-vfs",
            "binary_version": "3.5-1ubuntu1"
        },
        {
            "binary_name": "python3-nfs-ganesha",
            "binary_version": "3.5-1ubuntu1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-105516.json"
Ubuntu:24.04:LTS
nfs-ganesha

Package

Name
nfs-ganesha
Purl
pkg:deb/ubuntu/nfs-ganesha?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.3-2
4.3-5
4.3-8
4.3-8build1
4.3-8ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "nfs-ganesha",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-ceph",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-gluster",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-gpfs",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-mem",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-mount-9p",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-nullfs",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-proxy-v4",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-rados-grace",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-rgw",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "nfs-ganesha-vfs",
            "binary_version": "4.3-8ubuntu1"
        },
        {
            "binary_name": "python3-nfs-ganesha",
            "binary_version": "4.3-8ubuntu1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-105516.json"
Ubuntu:26.04:LTS
nfs-ganesha

Package

Name
nfs-ganesha
Purl
pkg:deb/ubuntu/nfs-ganesha?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5-5
6.5-6
6.5-7
6.5-8

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "nfs-ganesha",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-ceph",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-gluster",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-gpfs",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-mem",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-mount-9p",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-nullfs",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-proxy-v4",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-rados-grace",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-rgw",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "nfs-ganesha-vfs",
            "binary_version": "6.5-8"
        },
        {
            "binary_name": "python3-nfs-ganesha",
            "binary_version": "6.5-8"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-105516.json"
Ubuntu:26.10
nfs-ganesha

Package

Name
nfs-ganesha
Purl
pkg:deb/ubuntu/nfs-ganesha?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5-8
9.*
9.14-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "nfs-ganesha",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-ceph",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-gluster",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-gpfs",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-mem",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-mount-9p",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-nullfs",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-proxy-v4",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-rados-grace",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-rgw",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "nfs-ganesha-vfs",
            "binary_version": "9.14-1"
        },
        {
            "binary_name": "python3-nfs-ganesha",
            "binary_version": "9.14-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-105516.json"