Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fixed a use-after-free in ksmbdtreeconnectput under concurrency conditions. Under high concurrency, a tree-connection object tcon is freed during a disconnection path, while another path still holds a reference to it...

Linux Distros Unpatched Vulnerability : CVE-2026-68099

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: restore DACL size on checkaddoverflow to avoid malformed ACL checkaddoverflow unconditionally writes the truncated sum into d even on overflow, per its...

Linux Distros Unpatched Vulnerability : CVE-2026-68097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size...

Linux Distros Unpatched Vulnerability : CVE-2026-68083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not:...

Linux Distros Unpatched Vulnerability : CVE-2026-68098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that...

PT-2026-69501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the set ntacl dacl function copies Access Control Entries ACE from a stored security descriptor into the response Discretionary Access Control...

Linux Distros Unpatched Vulnerability : CVE-2026-68100

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: validate numsubauth when copying ACE in setntacldacl setntacldacl copies each ACE from the attacker-controlled stored security descriptor verbatim into...

Linux Distros Unpatched Vulnerability : CVE-2026-68130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the...

CVE-2026-64578

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB3 server. A remote attacker could exploit this vulnerability by crafting a malicious compound SMB2 request. This improper validation of the request size before reading specific data could lead to an out-of-bounds read,...

SUSE CVE-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

The vulnerabilities of the functions ksmbd_tree_conn_connect(), ksmbd_tree_connect PUT(), and ksmbd_tree_conn_disconnect() in the module fs/smb/server/mgmt/tree_connect.c, as well as the function smb2_tree_disconnect() in the module fs/smb/server/smb2pdu.c, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information within the SMB server framework of the Linux operating system.

The vulnerabilities of the functions ksmbdtreeconnconnect, ksmbdtreeconnect PUT, and ksmbdtreeconndisconnect in the module fs/smb/server/mgmt/treeconnect.c, as well as the function smb2treedisconnect in the module fs/smb/server/smb2pdu.c, are related to the reuse of previously freed memory due to...

CVE-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

CVE-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

CVE-2026-64578

Summary: CVE-2026-64578 affects the ksmbd component of the Linux kernel. A vulnerability exists where ksmbd_smb2_check_message() reads the 2-byte StructureSize2 field at offset 64 of an SMB2 compound element without first ensuring the element is large enough. An attacker can craft a compound SMB2...

EUVD-2026-53272

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

CVE-2026-64578 ksmbd: validate compound request size before reading StructureSize2

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

Linux Distros Unpatched Vulnerability : CVE-2026-64578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads...

CVE-2026-64389

A flaw was found in the Linux kernel's ksmbd component. A remote attacker could exploit a vulnerability in the NTLMv2 authentication process to modify a session key even when authentication fails. This bypasses security checks and could potentially lead to unauthorized access or session hijacking...

CVE-2026-64399

A flaw was found in ksmbd. This vulnerability allows a remote attacker to overwrite data on a shared file system due to insufficient permission checks in the FSCTLDUPLICATEEXTENTSTOFILE function. Even if a share is configured as read-only or a client has limited write attributes, an attacker can...

The vulnerability of the `ksmbd_kthread_fn()` function in the `fs/smb/server/transport_tcp.c` module, which is part of the SMB server support in Linux kernel, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ksmbdkthreadfn function in the fs/smb/server/transporttcp.c module of the SMB server support module in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker, acting remotely, to gain...