259 matches found
CVE-2026-99181
A flaw was found in the Linux kernel's autofs automount file system subsystem. A local attacker can cause a Denial of Service DoS by initiating file system lookups while the automount daemon is restarting. Due to mishandled errors from an obsolete communication pipe, the kernel incorrectly shuts...
CVE-2026-98979
A flaw was found in the Linux kernel. The kernel improperly allows automount operations beneath internal mount points that are not associated with a mount namespace. A local user can exploit this vulnerability by accessing an affected mount path, causing an invalid pointer dereference. This flaw...
CVE-2026-98977
A flaw was found in the Linux kernel. A local attacker with the ability to create user and mount namespaces can trigger an improper filesystem lock during an automatic mount automount operation. Because the kernel incorrectly assigns mount locks across namespaces during propagation, the lock is...
CVE-2026-98979
In the Linux kernel, the following vulnerability has been resolved: namespace: refuse an automount below a mount that is in no namespace It's possible to add autmounts even when the parent mount isn't in the mount namespace of the caller. The only requirement we have is that the parent mount...
Astra Linux – vulnerability in linux-5.10, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix an Oops in nfsdautomount When mounting from a NFSv4 referral, path-dentry can end up being a negative dentry; therefore, derive the struct nfsserver from the dentry itself instead...
Astra Linux – vulnerability in linux-5.10, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: cifs: fix DFS traversal oops without CONFIGCIFSDFSUPCALL When compiled with CONFIGCIFSDFSUPCALL disabled, cifsdfsdautomount is NULL. The cifs.ko logic responsible for mapping CIFSFATTRDFSREFERRAL attributes to SAUTOMOUNT and the...
DEBIAN-CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
EUVD-2026-92889
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
PT-2026-106284
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
CVE-2026-104032: Incorrect Behavior Order: Early Amplification
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
Linux Distros Unpatched Vulnerability : CVE-2026-104032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorizati...
K000163547: Linux kernel vulnerability CVE-2026-45991
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated partition descriptors can trigger a heap out-of-bounds write in partdescsloc. handlepartitiondescriptor...
CVE-2026-97562
A flaw was found in the Linux kernel's SMB Server Message Block client. A race condition occurs when a Distributed File System DFS automount expires while the client processes active filesystem references, resulting in a use-after-free memory flaw. A local user could exploit this timing issue...
AZL-104508 CVE-2026-97562 affecting package kernel for versions less than 6.6.158.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tconsupercb stores a raw superblock pointer, but cifsgetsuper takes its active reference only after iteratesuperstype has dropped sumount and its passive reference. Concurrent...
DEBIAN-CVE-2026-97562
In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tconsupercb stores a raw superblock pointer, but cifsgetsuper takes its active reference only after iteratesuperstype has dropped sumount and its passive reference. Concurrent...
UBUNTU-CVE-2026-97562
In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tconsupercb stores a raw superblock pointer, but cifsgetsuper takes its active reference only after iteratesuperstype has dropped sumount and its passive reference. Concurrent...
EUVD-2026-86870
In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tconsupercb stores a raw superblock pointer, but cifsgetsuper takes its active reference only after iteratesuperstype has dropped sumount and its passive reference. Concurrent...