Lucene search
K

15 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: smb: client: fixed a potential UAF in smb2closecachedfid findorcreatecacheddir could acquire a new reference after krefput The issue was observed when the refcount dropped to zero, but before cfidlistlock was acquired. In...

5.6AI score0.00036EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: smb: client: The split caching of bitfields in cachedfid was introduced to avoid race conditions involving shared bytes in the Read-Modify-Write operations. The functions isopen, haslease, and onlist are stored in the same...

8.8CVSS5.9AI score0.0003EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/02/19 12:26 a.m.2 views

SUSE CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

5.8CVSS5.7AI score0.0003EPSS
Exploits0References7
NVD
NVD
added 2026/02/18 4:22 p.m.3 views

CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

8.8CVSS0.0003EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2026/02/18 4:22 p.m.2 views

CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

8.8CVSS5.8AI score0.0003EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/18 2:53 p.m.25 views

CVE-2026-23230 smb: client: split cached_fid bitfields to avoid shared-byte RMW races

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

8.8CVSS0.0003EPSS
Exploits0References6
OSV
OSV
added 2026/02/18 2:53 p.m.1 views

CVE-2026-23230 smb: client: split cached_fid bitfields to avoid shared-byte RMW races

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

8.8CVSS5.4AI score0.0003EPSS
Exploits0References9
ATTACKERKB
ATTACKERKB
added 2026/02/18 2:53 p.m.4 views

CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

5.1AI score0.0003EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2026/02/18 2:53 p.m.3 views

CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

8.8CVSS5.3AI score0.0003EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/02/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but a...

8.8CVSS5.9AI score0.0003EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.1 views

PT-2026-20456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the SMB client implementation related to cached file identifier cached fid bitfields. Specifically, the is open, has lease, and on list flags were stored...

9.8CVSS7.2AI score0.00765EPSS
Exploits1References420
Debian CVE
Debian CVE
added 2025/12/09 4:9 a.m.2 views

CVE-2025-40328

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2closecachedfid findorcreatecacheddir could grab a new reference after krefput had seen the refcount drop to zero but before cfidlistlock is acquired in smb2closecachedfid, leading to...

5.1AI score0.00036EPSS
Exploits0
Cvelist
Cvelist
added 2025/12/09 4:9 a.m.20 views

CVE-2025-40328 smb: client: fix potential UAF in smb2_close_cached_fid()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2closecachedfid findorcreatecacheddir could grab a new reference after krefput had seen the refcount drop to zero but before cfidlistlock is acquired in smb2closecachedfid, leading to...

0.00036EPSS
Exploits0References4
OSV
OSV
added 2025/12/09 4:9 a.m.2 views

CVE-2025-40328 smb: client: fix potential UAF in smb2_close_cached_fid()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2closecachedfid findorcreatecacheddir could grab a new reference after krefput had seen the refcount drop to zero but before cfidlistlock is acquired in smb2closecachedfid, leading to...

6.3AI score0.00036EPSS
Exploits0References7
CVE
CVE
added 2025/12/09 4:9 a.m.10 views

CVE-2025-40328

CVE-2025-40328 : In the Linux kernel, the smb client could suffer a use-after-free in smb2_close_cached_fid() due to a race where a new reference could be grabbed after kref_put() dropped to zero but before cfid_list_lock is acquired. The fix switches to kref_put_lock() so cfid_release() is calle...

6AI score0.00036EPSS
Exploits0References4
Rows per page
Query Builder