CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Escalada de Privilegios Local del Kernel de Linux LPE Vulnerabilidad de escalada de privilegios local que afecta al cliente CIFS/SMB del kernel de Linux. 📖 Resumen CVE-2026-46243 es una vulnerabilidad de escalada de privilegios local LPE dentro del cliente CIFS/SMB de...

Linux Distros Unpatched Vulnerability : CVE-2026-89631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: reject a tree connect response whose byte count is too small CIFSTCon bounds its strnlen over the byte area with the server's ByteCount minus two,...

Linux Distros Unpatched Vulnerability : CVE-2026-89633

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 coalescet2 computes data pointers directly from server-supplied DataOffset fields wit...

Linux Distros Unpatched Vulnerability : CVE-2026-89637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set,...

Linux Distros Unpatched Vulnerability : CVE-2026-89636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: clear ce-tgthint in freetgts When freetgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cachedfstgt structures...

Linux Distros Unpatched Vulnerability : CVE-2026-89634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd smb/client: fix possible infinite loop and oob read in...

Linux Distros Unpatched Vulnerability : CVE-2026-89638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS...

CVE-2026-89632

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious server could exploit this vulnerability by sending specially crafted data, leading to an out-of-bounds read. This occurs because the reparsebufptr function reads data before properly validating the buffer size,...

CVE-2026-89637

A flaw was found in the Linux kernel's Server Message Block SMB client. When processing a malformed secondary TRANSACT2 response, a use-after-free UAF vulnerability and a buffer leak can occur in the cifschecktrans2 function. This can lead to a dangling buffer being reused by the demux thread,...

CVE-2026-89636

A flaw was found in the Linux kernel's Server Message Block SMB client. When the freetgts function frees data structures, a pointer ce-tgthint is not properly reset, leaving it pointing to a memory location that has already been deallocated. If this pointer is subsequently used, it can lead to a...

CVE-2026-89633

A flaw was found in the Linux kernel's Server Message Block SMB client. The coalescet2 function processes server-supplied DataOffset fields without proper validation against buffer boundaries. A remote attacker could exploit this by crafting malicious SMB responses. This could lead to out-of-boun...

CVE-2026-89630

A flaw was found in the Linux kernel's Server Message Block SMB client. An incorrect calculation of the dataoffset bound in the isvalidoplockbreak function can lead to a read overflow. This vulnerability allows a malicious SMB server to potentially trigger an out-of-bounds read, which could resul...

CVE-2026-89634

A flaw was found in the Server Message Block SMB client within the Linux kernel. An integer overflow in the ALIGN function, specifically within the symlinkdata error context loop, can lead to an out-of-bounds read. This issue allows a malicious SMB server to cause a denial of service DoS by...

CVE-2026-89634

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlinkdata" compared the post-ALIGN length against the remaining...

CVE-2026-89637

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set, mid-multiRsp true and a subsequent secondary response causes...

DEBIAN-CVE-2026-89634

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlinkdata" compared the post-ALIGN length against the remaining...

DEBIAN-CVE-2026-89636

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-tgthint in freetgts When freetgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cachedfstgt structures. If ce-tgthint is not reset before it is used later, it results in a...

CVE-2026-89636

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-tgthint in freetgts When freetgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cachedfstgt structures. If ce-tgthint is not reset before it is used later, it results in a...

AZL-100694 CVE-2026-89637 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set, mid-multiRsp true and a subsequent secondary response causes...

AZL-100628 CVE-2026-89634 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlinkdata" compared the post-ALIGN length against the remaining...