Linux Distros Unpatched Vulnerability : CVE-2026-89637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set,...

CVE-2026-89633

A flaw was found in the Linux kernel's Server Message Block SMB client. The coalescet2 function processes server-supplied DataOffset fields without proper validation against buffer boundaries. A remote attacker could exploit this by crafting malicious SMB responses. This could lead to out-of-boun...

CVE-2026-89631

CVE-2026-89631 affects the Linux kernel SMB (CIFS) client . In CIFSTCon(), the strnlen() bound over the byte area uses the server's ByteCount minus two; when ByteCount is 0 or 1, the value underflows to a huge size_t, causing cifs_strndup_from_utf16() to read up to 65,535 bytes past the ~16 KB sl...

PT-2026-90349

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the coalesce t2 function computes data pointers using server-supplied DataOffset fields without validating them against buffer bounds. A small...

Linux SMB Server Oplock Buffer Overflow

The vulnerability in the opinfoadd function within the fs/smb/server/oplock.c module of the Linux kernel’s SMB subsystem is related to the reuse of previously freed memory due to concurrent access to a resource race condition. Exploitation of this vulnerability enables a remote attacker to...

ROS-20260825-73-0006

The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...

ROS-20260825-73-0001

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Smb File System Heap Buffer Overflow DoS

The vulnerability of the smb2unlink function in the fs/smb/client/smb2inode.c file of the Smb file system in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux SMB Client Match Session

The vulnerability in the matchsession function within the fs/smb/client/connect.c file of the SMB file system in the Linux kernel is related to flaws in the authentication process. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux SMB Kernel Module Heap Buffer Overflow DoS

The vulnerability in the parsedurablehandlecontext function within the fs/smb/server/smb2pdu.c file of the SMB kernel in Linux is related to the reallocation of previously freed memory. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality, integrity, an...

Linux SMB Kernel Module SMB2 Session Setup Buffer Overflow DoS

The vulnerability in the smb2sesssetup function within the fs/smb/server/smb2pdu.c file of the SMB kernel module in the Linux operating system is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected information or...

Smb Kernel Heap Buffer Overflow DoS

The vulnerability of the senddone function in the fs/smb/server/transportrdma.c file of the Smb kernel of the Linux operating system is related to improper handling of the absence of a special element. Exploiting this vulnerability can allow an attacker, acting remotely, to compromise the...

Linux SMB File System Symlink Access DoS

The vulnerability in the symlinkdata and smb2parsesymlinkresponse functions within the fs/smb/client/smb2file.c file of the SMB module in the Linux kernel operating system is related to buffer overflow. Exploitation of this vulnerability may allow a remote attacker to gain access to protected...

Linux SMB File System Heap Buffer Overflow DoS

The vulnerability in the getfileallinfo function within the fs/smb/server/smb2pdu.c file of the SMB file system on Linux kernel is related to buffer overflow. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and availability of protected...

ROS-20260821-73-0074

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, ...

Linux SMB Server Buffer Overflow DoS

The vulnerability of the smb2read function in the fs/smb/server/smb2pdu.c module of the SMB server component of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-29870

Linux ksmbd contains a remote memory corruption vulnerability in the ACL inheritance path that allows remote clients with directory creation permissions to trigger a heap out-of-bounds read and subsequent heap corruption by setting a crafted DACL with a malformed SID containing an inflated...

Exploit for CVE-2026-31717

CVE-2026-31717: ksmbd DHnC Durable-Handle Reconnect Access-Con...

Linux Distros Unpatched Vulnerability : CVE-2026-31613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUSSTOPPEDONSYMLINK, smb2checkmessage returns success without any length...

Linux SMB Server Buffer Overflow DoS

The vulnerability of the smb2setea function in the fs/smb/server/smb2pdu.c module of the SMB server software in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an...