RHEL 10 : kernel (RHSA-2026:63128)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63128 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear...

The vulnerability of the cifs_oplock_break() function in the fs/smb/client/file.c module of the SMB client support library in Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cifsoplockbreak function in the fs/smb/client/file.c module of the SMB client support library in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

ALSA-2026:63128 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry CVE-2026-63808 kernel: KEYS: fix overflow in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-105549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105549 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...

SUSE CVE-2026-72310

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check smb2ioctlqueryinfo validates the PASSTHRUFSCTL response payload before copying it to userspace. The payload offset and length both come from 32-bit fields. The bounds...

kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

A flaw was found in the Linux kernel's Server Message Block SMB client. A missing lock around the tccount increment in the smb2findsmbsesstconunlocked function creates a race condition. This vulnerability, caused by an incomplete refactoring of locking mechanisms, could lead to unexpected behavio...

kernel: smb: client: fix change notify replay double-free

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability occurs due to a double-free error when handling change notify replies. If a response attempt returns a replayable error and frees its buffer, and then SMB2notifyinit fails, the same buffer can be freed agai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002980 advisory. An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue...

ROS-20260827-73-0026

The vulnerability of the cifsreadpageworker function in the fs/smb/client/file.c module of the SMB client support library in Linux kernel involves the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260827-73-0014

The vulnerability of the cifsdemultiplexthread function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098683 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifsfilldirent There is a race condition in the readdir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098924 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098694 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidoplockbreak Skip sessions that are being teared down...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104579 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check smb2ioctlqueryinfo validates the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098747 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can occur in cifsoplockbreak...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098973 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: let recvdone verify dataoffset, datalength and remainingdatalength This is inspired ...

The vulnerability of the matchSession() function in the fs/smb/client/connect.c module of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the matchSession function in the fs/smb/client/connect.c file of the SMB file system module in the Linux operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260825-73-0006

The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...

The vulnerability of the smbd_post_send_iter() function in the fs/smb/client/smbdirect.c module of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smbdpostsenditer function in the fs/smb/client/smbdirect.c module of the Smb file system in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...