51 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated dataoffset and datalength fields of the smbdirectdatatransfer structure, which could lead to...
PT-2025-40638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ksmbd component, specifically within the smbdirect functionality. The issue involves insufficient verification of remaining data length against max...
SUSE CVE-2025-39692
In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbdrdmastoplistening out of ksmbdrdmadestroy We can't call destroyworkqueuesmbdirectwq; before stopsessions! Otherwise already existing connections try to use smbdirectwq as a NULL pointer...
CVE-2025-39692 smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbdrdmastoplistening out of ksmbdrdmadestroy We can't call destroyworkqueuesmbdirectwq; before stopsessions! Otherwise already existing connections try to use smbdirectwq as a NULL pointer...
CVE-2025-39692 smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbdrdmastoplistening out of ksmbdrdmadestroy We can't call destroyworkqueuesmbdirectwq; before stopsessions! Otherwise already existing connections try to use smbdirectwq as a NULL pointer...
CVE-2025-39692
CVE-2025-39692 is a Linux kernel vulnerability related to the SMB ksmbd path where ksmbd_rdma_stop_listening() must be called before stop_sessions() to avoid using the smb_direct_wq pointer after destroy. The issue arises when the order is not respected, allowing existing connections to reference...
kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
A memory leak flaw was found in the Linux kernel's CIFS SMB Direct implementation. When memory region MR allocation fails during SMB Direct connection setup, the smbddestroy function returns early without cleaning up the connection info structure, resulting in a memory leak...
May 9, 2023—KB5026362 (OS Build 17763.4377) - EXPIRED
None None...
Metasploit Weekly Wrap-Up
Log4Shell goodness Log4Shell made an unfortunate end to 2021 for many organizations, but it also makes for some great additions to Metasploit Framework. Contributors sempervictus, schierlm, righel, timwr and our very own Spencer McIntyre have collaborated to bring us a Log4Shell module that uses...
Microsoft Windows SMB Direct Session Takeover
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows SMB Direct Session Takeover', 'Description' = %q This module will intercept direct SMB authentication requests to another host,...
Microsoft Windows SMB Direct Session Takeover
This module will intercept direct SMB authentication requests to another host, gaining access to an authenticated SMB session if successful. If the connecting user is an administrator and network logins are allowed to the target machine, this module will execute an arbitrary payload. To exploit...