369 matches found
autofs-cve-2026-84568
CVE-2026-84568 — Reverse engineering notes and reproduction Independent reverse engineering of the macOS autofs patch for CVE-2026-84568 , plus a working PoC for the trust-boundary violation. Apple published the advisory. Mr.Gedik @h4ck2s3c reported the bug. This repository documents the technica...
CLSA-2026-1792405584 sssd: Fix of 3 CVEs
CVE-2026-90462: deny access and cache the deny decision when the LDAP ppolicy access check lookup returns zero results, fixing a fail-open that let deleted or deprovisioned users keep passing access checks - CVE-2026-90996: reject header-only requests with an empty body in the NSS responder...
CVE-2026-98553
A flaw was found in the Linux kernel's automount file system autofs. A local user can trigger this issue by initiating an autofs mount operation that fails during initialization, causing the kernel to fail to release associated pipe file references. Repeated exploitation can permanently leak syst...
Linux Distros Unpatched Vulnerability : CVE-2026-98553
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an...
UBUNTU-CVE-2026-98553
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
CVE-2026-98553
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
DEBIAN-CVE-2026-98553
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
AZL-108863 CVE-2026-98553 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
CVE-2026-98553
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
EUVD-2026-103598
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
CVE-2026-98553 autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
CVE-2026-98553 autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
CVE-2026-98553
The Linux kernel contains a vulnerability in the autofs component where a pipe struct file reference is permanently leaked. This occurs when autofs_fill_super() fails before clearing the AUTOFS_SBI_CATATONIC flag—specifically during find_get_pid() failures on invalid pgrp mount options or when an...
CVE-2026-98553
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
PT-2026-116772
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofs kill sb When autofs fill super fails before clearing AUTOFS SBI CATATONIC for example, when find get pid fails on an invalid pgrp mount option, or when an fs context is closed...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: autofs: fixed a memory leak in waitqueues in autofscatatonicmode Syzkaller reports a memory leak: BUG: memory leak Unreferenced object 0xffff88810b279e00 size 96: Comm “syz-executor399”, pid 3631, jiffies 4294964921 age 23.870s H...
SUSE CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
Linux Distros Unpatched Vulnerability : CVE-2026-104045
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumerati...
CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
DEBIAN-CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...