390 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit within the received buffer; however, each referral also contains string offsets provided by the server. These...
CVE-2026-93210
A flaw was found in the Linux kernel's Server Message Block SMB client Distributed File System DFS cache. This vulnerability occurs due to improper handling of invalid target hints, specifically when a null pointer is dereferenced within the dfscachenorequpdatetgthint function. An attacker could...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211dfscaccancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: cifs: A use-after-free bug has been fixed in refreshcacheworker. The UAF bug occurred because we were putting DFS root sessions into cifsumount while the DFS cache refresher was executing. We have ensured that DFS root session...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU, but the DFS radar event handling code that calls ath11kmacgetarbypdevid was not marked as a read-side critical section. Mark the relevant cod...
Astra Linux – vulnerability in linux-5.10, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: cifs: fix DFS traversal oops without CONFIGCIFSDFSUPCALL When compiled with CONFIGCIFSDFSUPCALL disabled, cifsdfsdautomount is NULL. The cifs.ko logic responsible for mapping CIFSFATTRDFSREFERRAL attributes to SAUTOMOUNT and the...
kernel: cifs: validate DFS referral string offsets
A flaw was found in the Linux kernel's CIFS component. A remote attacker could exploit this vulnerability by providing a specially crafted Distributed File System DFS referral. The system fails to properly validate string offsets within these referrals, which can lead to an out-of-bounds read. Th...
CVE-2026-96938
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
CVE-2026-85931
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-85798
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-96938
A Heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 6.7 (Medium) , with high impact on confidentiality, integrity, and availability. Official fixes are ava...
EUVD-2026-99629
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-85798
A heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.2, reflecting high impact on confidentiality, integrity, and availability. No specific explo...
EUVD-2026-99510
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
EUVD-2026-99075
Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-105723
The Windows Distributed File System (DFS) component is vulnerable to an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve privilege escalation remotely over a network. While the specific vulnerable functions or files are not detailed in the provided documents, t...
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...