Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: The “binding mark” of a reused connection was unset. Steve French reported a null pointer dereference error from the sha256 lib. The cifs.ko module can send session setup requests using a reused connection. If a reused...

Linux Distros Unpatched Vulnerability : CVE-2026-89638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS...

EUVD-2026-76552

In the Linux kernel, the following vulnerability has been resolved: cifs: fix lofft underflow in cifsremapfilerange when len == 0 With len == 0 clone to EOF, the effective length is computed as: len = srcinode-isize - off; If off isize, this is a negative lofft, corrupting the ByteCount in the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098699)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098699 advisory. In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cifs: Fixed an issue where credits were not updated upon failure in cifsissueread. Fixed an issue where the credits value was not updated during a failed execution of cifsissueread, so that retrying the subreq would not...

Siemens SIMATIC S7-1500 CPU 1518 MFP NULL Pointer Dereference (CVE-2025-23143)

"In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited a few seconds, I observed two LOCKDEP splats: a warning immediately followed by a null-ptr-deref. 1 Reproduction Steps: 1 Mount CIF...

The vulnerability of the smb2_ioctl_query_info() function in the fs/cifs/smb2ops.c module of the Linux file system allows a hacker to cause a service failure.

The vulnerability of the smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c module of the Linux file system support module is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smb3_insert_range() function in the fs/cifs/smb2ops.c module of the Linux operating system allows a hacker to compromise the integrity and accessibility of protected information.

The vulnerability of the smb3insertrange function in the fs/cifs/smb2ops.c module of the Linux operating system is related to the incorrect implementation of the sequence of actions performed. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of t...

EUVD-2023-23475

Malicious code in bioql PyPI...

EUVD-2025-13094

Malicious code in bioql PyPI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a premature release of cfile in the cifs module, which could lead to reuse after release...

SUSE CVE-2025-38379

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2reconnectserver, a dummy tcon is passed down to smb2reconnect with -queryinterface uninitialized, so we can't call queuedelayedwork on it. Fix...

AZL-65780 CVE-2025-38379 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2reconnectserver, a dummy tcon is passed down to smb2reconnect with -queryinterface uninitialized, so we can't call queuedelayedwork on it. Fix...

PT-2025-27954

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version that includes the fix for the max sge overflow in smb extract folioq to rdma Description: A vulnerability has been resolved in the Linux kernel related to the max sge overflow in smb extract folioq t...

CVE-2022-49822

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections leak when tlink setup failed If the tlink setup failed, lost to put the connections, then the module refcnt leak since the cifsd kthread not exit. Also leak the fscache info, and for next mount with fsc, it...

CVE-2025-23143

In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited a few seconds, I observed two LOCKDEP splats: a warning immediately followed by a null-ptr-deref. 1 Reproduction Steps: 1 Mount CIFS...

CVE-2025-23143 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited a few seconds, I observed two LOCKDEP splats: a warning immediately followed by a null-ptr-deref. 1 Reproduction Steps: 1 Mount CIFS...

CVE-2025-23143

CVE-2025-23143 is a Linux kernel issue where unloading a module (e.g., CIFS/NFS) can race with a TCP socket still alive, leading to a NULL pointer dereference in lockdep when hlock_class() is called after the module is gone. The root cause is that CIFS assigns a different lock class to the socket...

CVE-2025-23143 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited a few seconds, I observed two LOCKDEP splats: a warning immediately followed by a null-ptr-deref. 1 Reproduction Steps: 1 Mount CIFS...

PT-2025-18397

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A null pointer dereference issue has been identified in the Linux kernel. The problem occurs when the CIFS module is unloaded while a TCP socket is still alive, causing a discrepancy...