2141 matches found
PT-2025-36843
Name of the Vulnerable Software and Affected Versions: Windows SMBv3 Client affected versions not specified Description: A use-after-free issue exists in the Windows SMBv3 Client. This allows an authorized attacker to execute code over a network. The vulnerability enables remote attackers to...
Microsoft SMBv3 资源管理错误漏洞
Microsoft SMBv3 is a support firmware from Microsoft Corporation USA that provides SMB functionality for devices. A resource management error vulnerability exists in Microsoft SMBv3. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in opencacheddir with lease breaks CVE-2025-37954 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: prevent overflow in lookup table allocation...
smb3: fix for slab out of bounds on mount to ksmbd
...
smb/server: avoid deadlock when linking with ReplaceIfExists
...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...
SUSE CVE-2025-38737
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...
PT-2025-36267
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the CIFS implementation where the smb3 init transform rq function does not initialize a buffer to NULL before calling netfs alloc folioq buffer...
The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c module of the SMB server support module for Linux operating systems allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...
The vulnerability of the smb component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the smb component in the Linux operating system’s kernel involves unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
AZL-73845 CVE-2025-38728 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...
smb: client: fix use-after-free in cifs_oplock_break
...
smb: client: fix potential deadlock when releasing mids
...
smb: client: fix warning when reconnecting channel
...
smb: client: fix potential UAF in cifs_stats_proc_show()
...
smb: client: fix potential UAF in cifs_stats_proc_write()
...
smb: client: fix potential UAF in cifs_dump_full_key()
...
smb: prevent use-after-free due to open_cached_dir error paths
...