PT-2026-98838

Name of the Vulnerable Software and Affected Versions Seclore FileSecure Desktop Client versions prior to 3.25.1.0 Description An improper access control issue exists in the kernel-mode driver component. This allows an authenticated local user to elevate their privileges to NT AUTHORITYSYSTEM,...

CVE-2026-98127

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3insertrange does not check if the new file size isize + len is valid. This allows FALLOCFLINSERTRANGE to bypass RLIMITFSIZE, exceed smaxbytes, or produce a size outside the lofft...

CVE-2026-97561: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid When the administrator mounts with forceuid or forcegid uid=/gid= mount options, they expect all files to appear owned by the specified user/group. However, severa...

openSUSE 16 Security Update : keybase-client (openSUSE-SU-2026:21925-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21925-1 advisory. Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Tenable has extracted the...

PT-2026-98494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs posix to fattr function ignores the return value of posix info parse. When an untrusted server provides a malformed POSIX directory entry...

PT-2026-98496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client when the cifs sb tlink function fails. This issue specifically affects configurations using the -o multiuser option. In these scenarios, t...

PT-2026-98499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the SMB client when rewriting a Discretionary Access Control List DACL. The functions replace sids and copy aces and set chmod dacl use a u16 accumulator to...

PT-2026-98501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the system fails to honor forceuid and forcegid mount options when mapping Security Identifiers SIDs to user and group IDs. Certain code paths...

PT-2026-98502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SMB client where tcon super cb stores a raw superblock pointer. Because cifs get super only takes an active reference after iterate supers type has dropped...

PT-2026-98504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs.idmap key descriptions contain authority-bearing fields, such as owner and group SIDs and uid/gid values in "os:", "gs:", "oi:", and "gi:...

PT-2026-98495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overflow exists in the SMB client when rewriting a Discretionary Access Control List DACL. The issue occurs in the id mode to cifs acl function, which allocates a buffer based on...

PT-2026-98497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client within the cifs queue oplock break function. The function takes a reference on the target file before queueing cifs oplock break, but the...

PT-2026-98498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the SMB client during a deferred close operation. When cifs close defers a close, it assigns the cifsFileInfo reference of the closing struct file to queued...

PT-2026-98505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the CIFSSMBRead function processes READ RSP responses from a server without verifying that the full response was received. Specifically, the...

PT-2026-98786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Server-side range operations in the SMB client modify file contents but fail to invalidate the FS-Cache cookie. While the affected page cache is discarded, the valid FS-Cache cookie may...

PT-2026-98787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 insert range and smb3 collapse range functions fail to properly invalidate the page cache when the offset off or old eof is not...

PT-2026-98788

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 zero range function may extend the End of File EOF without verifying the RLIMIT FSIZE limit when FALLOC FL ZERO RANGE is used without...

PT-2026-98789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb3 insert range function where the new file size is not validated. This allows the FALLOC FL INSERT RANGE operation to bypass RLIMIT FSIZE a process-level limit ...

CVE-2026-92289: Weak Authentication

Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentials does not verify the client secret. With oidcRPMetaDataOptionsRequirePKCE set to 2, the authorization endpoint...

CVE-2026-97557

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount in cifsqueueoplockbreak cifsqueueoplockbreak unconditionally takes a reference on the target file before queueing cifsoplockbreak. Only that work item decreases the reference counter again. If...