CVE-2026-98450 smb: client: close completed creates on compound wait errors

In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compoundsendrecv waits for responses in order. If a later wait is interrupted, or if a later MID fails during response synchronization, an earlier CREATE may already ha...

CVE-2026-98450

The Linux kernel contains a vulnerability in the SMB client where the compound_send_recv() function fails to properly manage remote handles during compound wait errors. If a later wait is interrupted or a later MID fails during synchronization, an earlier CREATE operation might already have opene...

CVE-2026-98450

In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compoundsendrecv waits for responses in order. If a later wait is interrupted, or if a later MID fails during response synchronization, an earlier CREATE may already ha...

CVE-2026-98449

The Linux kernel contains a vulnerability in the SMB client where compound requests fail to properly manage mids during a reconnect. Specifically, compound_send_recv() unlocks the server without removing mids from the pending_mid_q after a send failure. During reconnection, cifs_abort_connection(...

CVE-2026-98449 smb: client: delete compound mids on send failure before unlock

In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fails, smbsendrqst kicks off a reconnect. compoundsendrecv still has those mids on pendingmidq, but it unlocks the server without...

CVE-2026-98449

In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fails, smbsendrqst kicks off a reconnect. compoundsendrecv still has those mids on pendingmidq, but it unlocks the server without...

PT-2026-116671

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open cached dir sends CREATE and QUERY INFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

PT-2026-116669

In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compound send recv waits for responses in order. If a later wait is interrupted, or if a later MID fails during response synchronization, an earlier CREATE may already...

CVE-2023-2598

CVE-2023-2598 Privilege Escalation Understand the Compound Page and folio mechanisms in Linux through CVE-2023-2598, and subsequently see if it's possible to complete the exploitation of the 1day CVE-2023-6560. Compound Page huge page Memory is growing larger and larger, but the basic page...

CVE-2026-109854

The m17n-lib library contains a flaw where an attacker providing crafted input to an application processing ISO-2022 encoded text can trigger an uninitialized stack read during UTF-8 decoding. If the application returns the decoded output, this may lead to unexpected behavior and limited informat...

EUVD-2026-94531

Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks...

EUVD-2026-94533

Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS...

CVE-2026-107215

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

CVE-2026-107214

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values...

CVE-2026-107215 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

CVE-2026-107215

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

CVE-2026-107214 Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values...

CVE-2026-107214 Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values...

CVE-2026-107214

The Excelize Go language library (versions 2.3.1 to 2.11.0 ) contains a vulnerability where the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors process attacker-controlled values. Specifically, EncryptionInfo and EncryptedPackage ...

CVE-2026-107214: Uncaught Exception

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values...