CLSA-2024-1722977984 kernel: Fix of 17 CVEs

ima: Fix use-after-free on a dentry's dname.name CVE-2024-39494 - ima: define imamaxdigestdata struct without a flexible array variable - ima: detect changes to the backing overlay file - tcp: Use refcountincnotzero in tcptwskunique. CVE-2024-36904 - afunix: Fix garbage collector racing against...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs bsc1266290. CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

ALSA-2026:23329 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 kernel: smb: client: fix OO...

zeek:zeek-smb-fuzzer: Heap-buffer-overflow in binpac::SMB::SMB_Conn::proc_smb2_set_info_request_file_fscontrol

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=4869737828188160 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-smb-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700225cd78...

Boundary failure when parsing SMB responses

Description Secunia Research reported a vulnerability that allows for the execution of arbitrary code in smbd. This defect is is a result of an incorrect buffer size when parsing SMB replies in the routine receivesmbraw. Patch Availability A patch addressing this defect has been posted to...

ISS multiple products SMB parsing buffer overflow

Remote buffer overflow during SMB parsing leads to system account compromise...

ISS Security Brief: Vulnerability in SMB Parsing in ISS Products

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief February 26, 2004 Vulnerability in SMB Parsing in ISS Products Synopsis: A vulnerability was discovered in the SMB Server Message Block protocol parsing routines of the ISS Protocol Analysis Module PAM component found in...