12 matches found
The vulnerabilities of the functions symlink_data() and smb2ParseSymlinkResponse() in the fs/smb/client/smb2file.c file from the Smb file system of the Linux operating system allow a attacker to gain access to protected information or cause service failures.
The vulnerability of the functions symlinkdata and smb2ParseSymlinkResponse in the fs/smb/client/smb2file.c module of the Smb file system in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...
The vulnerability of the matchSession() function in the fs/smb/client/connect.c module of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the matchSession function in the fs/smb/client/connect.c file of the SMB file system module in the Linux operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the smb2_unlink() function in the fs/smb/client/smb2inode.c file of the Smb file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the smb2unlink function in the fs/smb/client/smb2inode.c file of the Smb file system in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the smb2_read() function in the fs/smb/server/smb2pdu.c module of the SMB server support module in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the smb2read function in the fs/smb/server/smb2pdu.c module of the SMB server component of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...
EUVD-2026-29870
Linux ksmbd contains a remote memory corruption vulnerability in the ACL inheritance path that allows remote clients with directory creation permissions to trigger a heap out-of-bounds read and subsequent heap corruption by setting a crafted DACL with a malformed SID containing an inflated...
Exploit for CVE-2026-31717
CVE-2026-31717: ksmbd DHnC Durable-Handle Reconnect Access-Con...
Linux Distros Unpatched Vulnerability : CVE-2026-31613
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUSSTOPPEDONSYMLINK, smb2checkmessage returns success without any length...
Linux Distros Unpatched Vulnerability : CVE-2025-40328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix potential UAF in smb2closecachedfid findorcreatecacheddir could grab a new reference after krefput had seen the refcount drop to zero but befor...
Linux Distros Unpatched Vulnerability : CVE-2025-38179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix maxsge overflow in smbextractfolioqtordma This fixes the following problem:...
Linux Distros Unpatched Vulnerability : CVE-2025-38208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: add NULL check in automountfullpath page is checked for null in buildpathfromdentryoptionalprefix when tcon-originfullpath is not set. However, the...
The vulnerability of the smb2_is_network_name_deleted() function in the Linux kernel-based SMB client implementation allows a attacker to cause a service failure.
The vulnerability of the smb2isnetworknamedeleted function in the fs/smb/client/smb2ops.c module of the SMB protocol client implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a servic...
The vulnerability of the cifsPut_tcpSession() function (fs/cifs/connect.c) in the SMB subsystem of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cifsPuttcpSession function fs/cifs/connect.c in the SMB subsystem of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...