EUVD-2026-119284

In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit sessions on each connection The pending setup limit only counts InProgress sessions. A client can complete authentication repeatedly and retain an unbounded number of Valid sessions on one connection. Reserve a...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value that may contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, allowing different ClientGUID values to be incorrectly treated a...

CLSA-2026-1772815097 Fix of 104 CVEs

CVE-2025-38699 - scsi: bfa: Double-free fix CVE-2025-38699 CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG CVE-2025-38697 CVE-2025-39823 - KVM: x86: use arrayindexnospec with indices that come from guest CVE-2025-39823 CVE-2025-39689 - ftrace: Also allocate and copy hash for...

DEBIAN-CVE-2026-98454

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

UBUNTU-CVE-2026-98454

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98454 smb: client: fix create context out-of-bounds reads

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98454 smb: client: fix create context out-of-bounds reads

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98454

A flaw in the Linux kernel SMB client allows a malicious SMB server to trigger out-of-bounds memory reads by sending malformed create context responses. The issue stems from smb2_parse_contexts() failing to limit each record to its Next field, potentially exposing bytes beyond the current context...

CLSA-2025-1738663576 kernel: Fix of 12 CVEs

ELF: fix kernel.randomizevaspace double read CVE-2024-46826 - smb: client: fix UAF in async decryption CVE-2024-50047 - SMB3: Resolve data corruption of TCP server info fields CVE-2024-50047 - smb3: add defines for new crypto algorithms CVE-2024-50047 - net: do not delay dstentriesadd in...

CLSA-2026-1783414155 kernel: Fix of 12 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - net: afkey: zero aligned sockaddr tail in PFKEY exports CVE-2026-43088 - ip6tunnel: clear skb2-cb in ip4ip6err CVE-2026-43037 - ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach CVE-2026-43038 - blk-cgroup:...

PT-2026-116902

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 zero range function, which emulates FALLOC FL ZERO RANGE, fails to unconditionally flush dirty data before invalidating the page cache vi...

PT-2026-116673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb2 parse contexts function validates the overall create-context area but fails to limit each record to its Next field before dispatching. Th...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from the fact that smb2parsecontexts does not limit each record within its Next field, and the SMB2/SMB3 lease resolver does not read data offset values. This can lead to out-of-bounds reads and exposure of...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd When KASAN is enabled, it is possible to encounter a slab out of bounds condition during mount to ksmbd due to a missing check in parseserverinterfaces see below: BUG: KASAN:...

PT-2026-115682

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3 enum snapshots If snapshot array size is smaller than GMT TOKEN SIZE, smb3 enum snapshots sets ret data len to sizeofstruct smb snapshot array without verifying the actual length of the...

PT-2026-106498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the smb3 enum snapshots function. When snapshot array size is smaller than GMT TOKEN SIZE, the function sets ret data len to the size of struct smb snapsh...

SUSE CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

AZL-104675 CVE-2026-98115 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

DEBIAN-CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...