CVE-2023-54280

CVE-2023-54280 affects the Linux kernel and concerns a race condition in CIFS when building IPC trees. The patch fixes a use-after-free in __tree_connect_dfs_target() by protecting access to TCP_Server_Info.hostname during IPC tree name construction and updating IPC tcon state on success to avoid...

DEBIAN-CVE-2023-52741

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata-readintopages When the network status is unstable, use-after-free may occur when read data from the server. BUG: KASAN: use-after-free in readpagesfillpages+0x14c/0x7e0 Call Trace:...

Cisco ASA Clientless SSL VPN CIFS Heap Overflow Vulnerability (cisco-sa-20170208-asa)

A vulnerability in Common Internet Filesystem CIFS code in the Clientless SSL VPN functionality of Cisco ASA Software could allow an authenticated, remote attacker to cause a heap overflow. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced source...