Lucene search
+L

24 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/19 12:00 a.m.•12 views

UBUNTU-CVE-2026-98450

In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compoundsendrecv waits for responses in order. If a later wait is interrupted, or if a later MID fails during response synchronization, an earlier CREATE may already ha...

2CVSS6.2AI score0.00168EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/10/18 11:46 p.m.•13 views

SUSE CVE-2026-98452

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

5.9AI score0.00175EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/10/18 4:16 p.m.•11 views

AZL-108717 CVE-2026-98450 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compoundsendrecv waits for responses in order. If a later wait is interrupted, or if a later MID fails during response synchronization, an earlier CREATE may already ha...

6AI score0.00168EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/10/18 4:16 p.m.•12 views

AZL-109101 CVE-2026-98452 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

5.9AI score0.00175EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/18 3:15 p.m.•7 views

CVE-2026-98452 smb: client: clean up failed cached directory opens

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

6AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/10/18 3:15 p.m.•12 views

EUVD-2026-103692

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

5.9AI score0.00175EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/18 3:15 p.m.•31 views

CVE-2026-98452 smb: client: clean up failed cached directory opens

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

0.00175EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/18 12:00 a.m.•6 views

CVE-2026-98452: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

6AI score0.00175EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/10 12:39 a.m.•18 views

kernel: smb: client: fix double-free in SMB2_close() replay

A flaw was found in the Linux kernel's Server Message Block SMB client. A vulnerability exists in the SMB2close replay mechanism where a response buffer can be freed twice. This double-free condition can lead to memory corruption, potentially resulting in a denial of service or the execution of...

9.8CVSS6.4AI score0.00359EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 9:06 a.m.•16 views

kernel: smb: client: fix double-free in SMB2_close() replay

A flaw was found in the Linux kernel's Server Message Block SMB client. A vulnerability exists in the SMB2close replay mechanism where a response buffer can be freed twice. This double-free condition can lead to memory corruption, potentially resulting in a denial of service or the execution of...

9.8CVSS6.4AI score0.00359EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2026/08/07 8:11 a.m.•26 views

smb: client: fix double-free in SMB2_close() replay

...

9.8CVSS5.9AI score0.00359EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/08/06 7:13 a.m.•3 views

CVE-2026-64597 smb: client: fix double-free in SMB2_close() replay

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2close replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2closeinit fails before the next send, cleanup retains the previous buffer type and fre...

9.8CVSS6.1AI score0.00359EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•9 views

CVE-2026-64597: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2close replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2closeinit fails before the next send, cleanup retains the previous buffer type and fre...

9.8CVSS6.2AI score0.00359EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•3 views

CVE-2026-64597: Double Free

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2close replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2closeinit fails before the next send, cleanup retains the previous buffer type and fre...

9.8CVSS6.2AI score0.00359EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/08/05 4:00 p.m.•10 views

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from the repeated release of the response buffer during the SMB2close function’s replay process...

9.8CVSS6AI score0.00359EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/07/25 10:17 a.m.•23 views

CVE-2026-64437

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on SMB2CLOSE then SMB2CANCEL Commit f580d27e8928 "ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL" made smb2cancel skip a work whose state is...

8.8CVSS7.5AI score0.00435EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•6 views

CVE-2026-64437: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on SMB2CLOSE then SMB2CANCEL Commit f580d27e8928 "ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL" made smb2cancel skip a work whose state is...

8.8CVSS7.5AI score0.00435EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2023-36515

Malicious code in bioql PyPI...

8.1CVSS7.2AI score0.02495EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/07/24 4:15 p.m.•24 views

CVE-2023-32258

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

8.1CVSS6.7AI score0.02495EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/07/24 4:15 p.m.•50 views

CVE-2023-32258

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

8.1CVSS7AI score0.02495EPSS
SaveExploits0References8
Rows per page
Query Builder