CVE-2026-99272

The Linux kernel contains a vulnerability in the SMB client where SMB2_read() fails to validate that the data range lies within the actual received response. Specifically, it copies DataLength bytes from a response without verifying the bounds of the receive object. A malicious server can provide...

EUVD-2026-119290

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the data area in SMB2read SMB2read copies le32tocpursp-DataLength bytes from char rsp + rsp-DataOffset without checking that the range lies within the response actually received. A READ response with...

ROS-20260928-73-0083

The vulnerability of the smb2read function in the fs/smb/server/smb2pdu.c module of the SMB server module in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read A memory leak occurs when ksmbdvfsread fails. This issue is fixed by adding the missing kvfree...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003789 advisory. An issue was discovered in the Linux kernel before 5.0.10. SMB2read in fs/cifs/smb2pdu.c has a use-after- free. NOTE: this was not fixed correctly in 5.0.10; see the...

ROS-20260113-7372

A vulnerability in the smb2read function of the fs/smb/server/smb2pdu.c module of the SMB subsystem of the Linux operating system kernel is related to the failure to free memory after an effective lifetime. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denia...

CVE-2025-40286 smb/server: fix possible memory leak in smb2_read()

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

CVE-2025-40286 smb/server: fix possible memory leak in smb2_read()

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

CVE-2025-40286: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

EUVD-2019-6824

Malware in sbrugna...

EUVD-2023-42915

Malicious code in bioql PyPI...

CVE-2023-39180

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

CVE-2023-39180 Kernel: ksmbd: read request memory leak denial-of-service vulnerability

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

CVE-2023-39180 Kernel: ksmbd: read request memory leak denial-of-service vulnerability

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

CVE-2023-39180

CVE-2023-39180 affects the Linux kernel ksmbd module. The root cause is improper memory release after the memory’s lifetime in SMB2_READ handling, enabling a network-based DoS without authentication on systems with ksmbd enabled. Public details confirm impact as denial-of-service; no vendor patch...

CVE-2023-39180: Uncontrolled Resource Consumption

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

CVE-2023-39180

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

CVE-2024-46686 smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2newreadreq This happens when called from SMB2read while using rdma and reaching the rdmareadwritethreshold...

CVE-2024-46686 smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2newreadreq This happens when called from SMB2read while using rdma and reaching the rdmareadwritethreshold...