CVE-2023-32251

A vulnerability has been identified in the Linux kernel's ksmbd component kernel SMB/CIFS server. A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the...

CVE-2023-32251

A vulnerability has been identified in the Linux kernel's ksmbd component kernel SMB/CIFS server. A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the...

PT-2025-22186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue in the Linux kernel's ksmbd component, related to Kerberos authentication, has been identified. The problem arises when another thread operates on a session and us...

PT-2025-18456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A warning in the Linux kernel has been resolved, specifically in the ksmbd component, related to the kernel write iter function. This issue prevented writing to a directory...

PT-2025-16679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns an overflow in the dacloffset bounds check within the ksmbd component of the Linux kernel. Originally, the dacloffset field was typed as int and used in an unchecked...

PT-2025-16678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the ksmbd component. The issue arises when accessing psid-sub authpsid-num subauth - 1 without checking if num...

PT-2025-16680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between session setup and ksmdb sessions deregister in the Linux kernel, specifically in the ksmbd component. This condition can lead to a session being freed...

PT-2025-16681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue can occur in the Linux kernel's ksmbd component, specifically in the ksmbd sessions deregister function. This issue arises in multichannel mode when the second...

PT-2025-14348

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the ksmbd component of the Linux kernel. Specifically, the interim entry of ksmbd work could be deleted after an oplock is freed...

PT-2025-14336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the ksmbd component. The issue involved the potential freeing of ksmbd work after connection release during oplock...

PT-2025-14325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's ksmbd component has been resolved. The issue occurs when the lock count is greater than 1, causing flags to potentially hold an old value. This should be...

PT-2025-8860 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to integer overflows in the ksmbd component of the Linux kernel on 32-bit systems. Specifically, the addition operations in the ipc msg alloc function can...

PT-2025-14326

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the ksmbd component related to smb2 lock. This occurs when smb lock-zero len has a value, and the -llist o...

PT-2025-14328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a type confusion vulnerability via a race condition when using ipc msg send request in the ksmbd component. This occurs because req-handle is allocated using ksmb...

PT-2025-14327

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds error in the parse sec desc function within the ksmbd component of the Linux kernel. This occurs when osidoffset, gsidoffset, and dacloffset are...

PT-2024-34110

The Linux kernel's ksmbd component is affected by a memory exhaustion issue due to simultaneous SMB operations, which can consume excessive memory through the "ksmbd work cache", leading to an Out-of-Memory OOM issue. The issue arises when a client sends multiple SMB operations to ksmbd, and the...

PT-2024-34109

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the ksmbd component. The issue involves the xa store function, which can fail and return errors such as xa...

PT-2024-33827

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to the ksmbd component in the Linux kernel. When sending an oplock break request, opinfo-conn is used, but a freed -conn can be used on multichannel, leading to potential...

PT-2024-29211

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The issue is related to the ksmbd component in the Linux kernel, where the may open function does not allow a directory to be opened with write access. However, some writing flags set by the...

PT-2024-8980 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the get file stream info function of the ksmbd component in the Linux kernel. This memory leak occurs due to the lack of memory release after i...