Lucene search
K

6 matches found

Redos
Redos
added 2026/03/17 12:0 a.m.1 views

ROS-20260317-73-0025

A vulnerability in the cryptmessage function in the fs/smb/client/smb2ops.c module of the SMB client support module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability...

7.8CVSS5.8AI score0.0004EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/07/28 11:22 p.m.1 views

SUSE CVE-2025-38488

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from cryptmessage, assuming all crypto operations are synchronous. However, when hardware crypto...

7.8CVSS6.5AI score0.0004EPSS
Exploits0References117
OSV
OSV
added 2025/07/28 12:15 p.m.2 views

AZL-73458 CVE-2025-38488 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from cryptmessage, assuming all crypto operations are synchronous. However, when hardware crypto...

7.8CVSS5.8AI score0.0004EPSS
Exploits0References1
OSV
OSV
added 2025/07/28 12:15 p.m.0 views

UBUNTU-CVE-2025-38488

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from cryptmessage, assuming all crypto operations are synchronous. However, when hardware crypto...

7.8CVSS5.8AI score0.0004EPSS
Exploits0References39
Debian CVE
Debian CVE
added 2025/07/28 11:21 a.m.2 views

CVE-2025-38488

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from cryptmessage, assuming all crypto operations are synchronous. However, when hardware crypto...

7.8CVSS6.4AI score0.0004EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/07/05 12:0 a.m.5 views

PT-2025-31084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free condition exists in the SMB client within the Linux kernel's crypt message function when asynchronous cryptography is utilized. The initial fix for CVE-2024-50047 remove...

7.8CVSS6AI score0.0004EPSS
Exploits0
Rows per page
Query Builder