CVE-2026-64401

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a use-after-free, occurs when handling witness registrations. Specifically, a second mount for the same network share can cause the system to incorrectly reference a previously freed connection, leading to...

SUSE CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

CVE-2026-64401 smb: client: resolve SWN tcon from live registrations

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

SUSE CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137

A flaw was found in the Linux kernel's Common Internet File System CIFS client. This vulnerability allows an unprivileged local user to send witness notifications or join a specific multicast group without proper administrative privileges. Exploiting this flaw could lead to information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2026-64137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness- notify command. The intended sender is the cifs.witness helpe...

CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137

The CVE-2026-64137 issue affects the Linux kernel CIFS client (SWN netlink). The vulnerability arises because CIFS_GENL_CMD_SWN_NOTIFY and related SWN multicast group handling lack proper capability checks, allowing an unprivileged local process to send witness notifications or join the multicast...

CVE-2026-64137 smb: client: require net admin for CIFS SWN netlink

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137 smb: client: require net admin for CIFS SWN netlink

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

PT-2026-61454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the SMB client where the CIFS GENL CMD SWN NOTIFY userspace witness-notify command lacks a capability flag. This allows any local process to send RESOURCE CHANGE or CLIE...

Linux Distros Unpatched Vulnerability : CVE-2026-49834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or...

CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: undock, ratify, flux-source-controller, zarf, aactl, witness, podman, kyverno-notation-aws, kubescape, falcoctl, kots, skopeo, gitsign, kyverno, slsa-verifier, tekton-chains, buildah...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: undock, ratify, flux-source-controller, zarf, aactl, witness, podman, kyverno-notation-aws, kubescape, falcoctl, kots, skopeo, gitsign, kyverno, slsa-verifier, tekton-chains, buildah...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cosign, nerdctl, istio, kubescape, docker, snyk-cli, k3s, crossplane-provider-family-azure, caddy, podman, falcoctl, helm, zot, apko, skaffold, witness, step, atlantis, nfpm, zarf, mods, hcloud, pulumi, aactl, step-kms-plugin, chezmoi, flux, splunk-otel-collector,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: cosign, nerdctl, crossplane-provider-aws-ec2, crossplane-provider-aws-memorydb, istio, kubescape, docker, snyk-cli, k3s, crossplane-provider-family-azure, caddy, podman, terraform-provider-acme, falcoctl, helm, zot, apko, crossplane-provider-aws-elasticache, skaffold...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: nerdctl, istio, kubescape, snyk-cli, k3s, caddy, podman, helm, zot, apko, skaffold, witness, step, nfpm, zarf, pulumi, aactl, step-kms-plugin, chezmoi, flux, external-secrets-operator, loki, opentelemetry-collector, nuclei, kine, pulumi-language-java,...