4155 matches found
SUSE-SU-2026:5091-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path...
openSUSE 16: cifs-utils / cifs-utils-devel / pam_cifscreds / etc (openSUSE-SU-2026:22170-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22170-1 advisory. This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932. Tenable h...
CVE-2007-2447
CVE-2007-2447 š„ļø -h3x0v3rl0rd- ļøā£ CVE-2007-2447 python3 smb3.0.20.py -lh localhost -lp local port -t target Error The error you're encountering indicates that the Python script is trying to import a module named smb, but it is not installed on your system. The smb module is part of the pysmb...
[SECURITY] Fedora 45 Update: cifs-utils-7.9-2.fc45
The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS...
CLEANSTART-2024-DC60720 cifs-utils through 6
Security vulnerability affects the cifs-utils package. cifs-utils through 6...
CLEANSTART-2024-AL23088 In cifs-utils through 6
Security vulnerability affects the cifs-utils package. In cifs-utils through 6...
CVE-2002-0991
CVE-2002-0991 Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier Exploit-db publication at https://www.exploit-db.com/exploits/21577/ Packetstorm publication at https://packetstormsecurity.com/files/26303/cifslogin.txt.html SecurityFocus publication at...
CIFSwitch-Checker-CVE-2026-46243
CIFSwitch Checker - CVE-2026-46243 Checker for Linux to identify configurations potentially vulnerable to the CIFSwitch vulnerability CVE-2026-46243. It does not exploit the vulnerability or modify the system. The main goal is to help identify potentially affected systems and validate mitigations...
cifswitch-check
cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 ā a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...
Fedora 45 : cifs-utils (2026-c3f7378a61)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c3f7378a61 advisory. Fix for CVE-2026-104715. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
Security update for cifs-utils (important)
openSUSE security update: security update for cifs-utils ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22170-1 Rating: important References: bsc1284932 Cross-References: CVE-2026-104715 CVSS scores: CVE-2026-104715 SUSE : 7.8...
CVE-2026-46243
šØ CVE-2026-46243 - CIFSwitch Linux Kernel Local Privilege Escalation LPE Local Privilege Escalation vulnerability affecting the Linux Kernel CIFS/SMB client. š Overview CVE-2026-46243 is a Local Privilege Escalation LPE vulnerability within the Linux Kernel's CIFS/SMB client. Improper validation ...
CVE-2026-99137
In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...
CVE-2026-104715 affecting package cifs-utils for versions less than 7.9-1
CVE-2026-104715 affecting package cifs-utils for versions less than 7.9-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-99110
A flaw was found in the Linux kernel's Common Internet File System CIFS client. When converting a POSIX Access Control List ACL to the network wire format, the kernel verifies the ACL against an extended attribute size calculation instead of the larger network format size, leading to a heap-based...
CVE-2026-99137
In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...
SUSE CVE-2026-99137
In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...
CVE-2026-99137
In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...
DEBIAN-CVE-2026-99110
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in cifsdosetacl cifssetacl validates ACL size using posixaclxattrsize: 4 + count 8 // 4-byte header + 8 bytes per ACE cifsdosetacl then calls posixacltocifs to write the CIFS wire format into the sa...
CVE-2026-99110
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in cifsdosetacl cifssetacl validates ACL size using posixaclxattrsize: 4 + count 8 // 4-byte header + 8 bytes per ACE cifsdosetacl then calls posixacltocifs to write the CIFS wire format into the sa...