90 matches found
CVE-2026-23093
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dmaunmapsg nents The dmaunmapsg functions should be called with the same nents as the dmamapsg, not the value the map function returned...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003754)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003754 advisory. Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists. Tenable has extracted the preceding description...
CVE-2025-68786
In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current isize including 0, the code used to call checklockrangefilp, isize, size - 1, WRITE, which computes size - 1 and can underflow for...
kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...
EUVD-2017-4682
Malware in sbrugna...
EUVD-2017-0781
Malware in sbrugna...
EUVD-2025-9947
Malicious code in bioql PyPI...
EUVD-2022-27074
Malicious code in bioql PyPI...
EUVD-2025-30850
Malicious code in bioql PyPI...
EUVD-2025-27880
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-32253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a...
Huawei HarmonyOS kernel file system module Competitive Condition Vulnerability Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS kernel file system module, which can be exploited by attackers to affect availability...
CVE-2025-38523
CVE-2025-38523 affects the Linux kernel CIFS/SMB client path. The issue stems from the smbd_response slab’s packet trailer not being marked as allowed for usercopy, causing kernel memory exposure checks in copy_to_iter() to trip when HARDENED_USERCOPY is enabled. The fix is in the kernel by confi...
CVE-2025-54625
Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54625
CVE-2025-54625 affects Huawei HarmonyOS, involving a race condition in the kernel file system module. Public references describe a local impact vector with potential availability disruption; CVSS metrics vary (NVD: 4.7 base, MEDIUM; Huawei CNA: 6.7, MEDIUM) and do not specify a concrete patch. No...
PT-2025-32067 · Kernel · Kernel
Name of the Vulnerable Software and Affected Versions: kernel file system module affected versions not specified Description: A race condition exists within the kernel file system module. Successful exploitation of this issue may impact system availability. Recommendations: At the moment, there i...
UBUNTU-CVE-2023-32251
A vulnerability has been identified in the Linux kernel's ksmbd component kernel SMB/CIFS server. A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the...
The vulnerability in the `udf_symlink()` function of the `fs/udf/namei.c` module in the Linux kernel file system allows a attacker to cause a service failure.
The vulnerability of the udfsymlink function in the fs/udf/namei.c module of the Linux file system’s support for the file system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the decompress_chunk() function in the fs/ntfs3/lznt.c file of the Linux kernel’s file system ntfs3 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the decompresschunk function in the fs/ntfs3/lznt.c file of the Linux kernel’s file system ntfs3 is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
kernel: cifs: Fix memory and information leak in smb3_reconfigure()
A memory and information leak vulnerability was found in the Linux kernel's CIFS/SMB3 filesystem driver. When smb3reconfigure fails during smb3syncsessionctxpasswords, the newly allocated password buffers newpassword and newpassword2 are not freed or securely erased. This causes a memory leak and...