333 matches found
PT-2025-30851
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the kernel’s ksmbd module related to oplock/lease break acknowledgements. If the ksmbd iov pin rsp function returns an error, accessing opinfo-state can...
kernel: smb: client: fix potential UAF in smb2_is_valid_oplock_break()
A flaw was found in the Linux kernel's SMB client. A local user could trigger a use-after-free condition accessing memory after it has been released in the smb2isvalidoplockbreak function by referencing SMB sessions currently being terminated. This flaw primarily allows an attacker to cause a...
kernel: smb: client: fix potential UAF in is_valid_oplock_break()
A use-after-free flaw was found in the Linux kernel in smb isvalidoplockbreak when exiting a session. This flaw allows a local attacker to crash the system...
SUSE-SU-2024:3834-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506008 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG bsc1231419 - CVE-2024-35863: Fixed potential UAF...
SUSE CVE-2024-49988
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
CVE-2024-49988
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
DEBIAN-CVE-2024-49988
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
UBUNTU-CVE-2024-49988
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
CVE-2024-49988 ksmbd: add refcnt to ksmbd_conn struct
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
CVE-2024-49988 ksmbd: add refcnt to ksmbd_conn struct
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
CVE-2024-49988 ksmbd: add refcnt to ksmbd_conn struct
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
CVE-2024-49988: Use After Free
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...
AZL-49421 CVE-2024-46742 affecting package kernel for versions less than 5.15.182.1-1
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of leasectxinfo in smb2open null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate return NULL. Fix this by check if 'leasectxinfo' is NULL. Additionally,...
PT-2024-33827
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to the ksmbd component in the Linux kernel. When sending an oplock break request, opinfo-conn is used, but a freed -conn can be used on multichannel, leading to potential...
PT-2024-32163
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description A null pointer dereference issue has been resolved in the Linux kernel. The issue occurs when req op level equals SMB2 OPLOCK LEVEL LEASE and parse lease state returns NULL, causing a null...
CVE-2024-42050
The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM via an oplock on CredProviderInst.reg...
CVE-2024-42050
The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM via an oplock on CredProviderInst.reg...
Exploit for CVE-2024-37726
CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitra...
Linux SMB is_valid_oplock_break() DoS
The vulnerability of the isvalidoplockbreak function in the fs/smb/client/misc.c module of the SMB client implementation in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2024-35863
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...