CIFSwitch-Checker-CVE-2026-46243

CIFSwitch Checker - CVE-2026-46243 适用于 Linux 的检查器，用于识别可能受到 CIFSwitch 漏洞 CVE-2026-46243 影响的配置。 该工具不利用漏洞，也不修改系统。主要目标是帮助识别潜在受影响的计算机并验证缓解措施。 该工具对以下内容执行被动检查： cifs-utils cifs.upcall request-key CIFS/SMB 用户命名空间 常见缓解措施 技术参考 原始漏洞和用于开发此检查器的概念验证 PoC 可在以下仓库中找到： https://github.com/manizada/CIFSwitch 安装与使用 克隆仓...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Linux 内核本地权限提升 LPE 影响 Linux 内核 CIFS/SMB 客户端的本地权限提升漏洞。 📖 概述 CVE-2026-46243 是 Linux 内核 CIFS/SMB 客户端中的一个本地权限提升（LPE ）漏洞。 cifs.spnego 密钥描述验证不当，允许无特权的本地用户在特定系统配置下冒充受信任的内核生成请求，从而导致权限提升。 ✨ 亮点 📌 受影响的配置 成功利用通常需要： 启用了 CIFS 的 Linux 内核 cifs-utils 默认的 cifs.upcall 已启用用户命名空间 本地 shell...

cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

PT-2026-72498

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check smb2 ioctl query info validates the PASSTHRU FSCTL response payload before copying it to userspace. The payload offset and length both come from 32-bit fields. The bound...

SUSE SLES15 / openSUSE 15 : Security update for the Linux Kernel (SUSE-SU-2026:1041-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1041-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui bsc1254992. CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET bsc1249587...

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637...

Cannot restore to the backup repository host when storage VSP is enabled

Article Applicability Starting in Veeam Backup & Replication 12.1, this error will no longer occur due to internal coding changes. Challenge A Hyper-V Instant Recovery or SureBackup Job fails with the error message: Cannot restore to the backup repository host when storage VSP is enabled. Cause T...

Samba Server Detection

The remote host is running Samba, a CIFS/SMB server for Linux and Unix. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25240; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptnameenglish:"Samba Server Detection";...