Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a post-release reuse vulnerability in the cifs module...

CVE-2023-52434

A flaw was found in the smb client in the Linux kernel. A potential out-of-bounds error was seen in the smb2parsecontexts function. Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. Mitigation To mitigate this issue, prevent module cifs from being loaded...

CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following oops when accessing invalid create contexts from server: BUG: unabl...

PT-2024-3838

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to a Use-After-Free UAF bug in the smb2 reconnect server function. This bug occurs when smb2 reconnect server accesses a session that is already being torn down by another...

kernel: cifs: Fix memory leak when using fscache

A flaw was found in the cifs module in the Linux kernel. A missing decrement of the reference count will cause a memory leak, potentially impacting system performance and resulting in a denial of service...

PT-2025-18816

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc7-lku 23 Description A use-after-free bug has been identified in the Linux kernel, specifically in the refresh cache worker function. This bug occurred due to the improper handling of DFS root sessions in...

SUSE CVE-2008-1673

The asn1 implementation in a the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ipnatsnmpbasic modules; and b the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of servi...

Linux kernel memory misreference vulnerability (CNVD-2019-31648)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory misreference vulnerability exists in SMB2read in fs/cifs/smb2pdu.c in versions of Linux kernel prior to 5.0.10. No details of the vulnerability are provided a...