Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the `ksmbd_vfs_stream_read()` function in the KSMBD daemon of the Linux operating system allows a hacker to disclose protected information and cause service failures.

🗓️ 29 Jan 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerability in ksmbd_vfs_stream_read() enables remote data disclosure and service disruption via crafted SMB requests to ADS directory files.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
AstraLinux		Astra Linux – Vulnerability in Linux 6.1
11 Feb 202507:35
–astralinux
AstraLinux		Astra Linux – Vulnerability in Linux 6.1
11 Feb 202507:35
–astralinux
Tenable Nessus		Azure Linux 3.0 Security Update: kernel (CVE-2024-56626)
20 Mar 202500:00
–nessus
Tenable Nessus		Azure Linux 3.0 Security Update: kernel (CVE-2024-56627)
20 Mar 202500:00
–nessus
Tenable Nessus		Debian dla-4076 : linux-config-6.1 - security update
1 Mar 202500:00
–nessus
Tenable Nessus		CBL Mariner 2.0 Security Update: kernel (CVE-2024-56626)
10 Mar 202500:00
–nessus
Tenable Nessus		CBL Mariner 2.0 Security Update: kernel (CVE-2024-56627)
10 Mar 202500:00
–nessus
Tenable Nessus		NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)
25 Jul 202500:00
–nessus
Tenable Nessus		Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20095)
10 Feb 202500:00
–nessus
Tenable Nessus		Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20480)
18 Jul 202500:00
–nessus
Rows per page
Vulners
Node
canonicalubuntuMatch24.10
SourceLink
gitwww.git.kernel.org/stable/c/27de4295522e9a33e4a3fc72f7b8193df9eebe41
gitwww.git.kernel.org/stable/c/6bd1bf0e8c42f10a9a9679a4c103a9032d30594d
gitwww.git.kernel.org/stable/c/81eed631935f2c52cdaf6691c6d48e0b06e8ad73
gitwww.git.kernel.org/stable/c/de4d790dcf53be41736239d7ee63849a16ff5d10
gitwww.git.kernel.org/stable/c/fc342cf86e2dc4d2edb0fc2ff5e28b6c7845adb9
githubwww.github.com/google/security-research/security/advisories/GHSA-gqrv-6fcf-hvv8
security-trackerwww.security-tracker.debian.org/tracker/CVE-2024-56627
ubuntuwww.ubuntu.com/security/CVE-2024-56627
securityonlinewww.securityonline.info/cve-2024-56626-cve-2024-56627-critical-linux-kernel-smb-server-bugs-uncovered-poc-published/
redoswww.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-110325/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
20 Jan 2026 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS 39.1
CVSS 29.4
EPSS0.00021
ksmbd vfs stream readremote data disclosureservice disruptionactive directory services
1