Lucene search
+L

18 matches found

Kitploit
Kitploit
•added 2026/10/16 10:17 a.m.•20 views

aced

Aced Aced is a tool to parse and resolve a single targeted Active Directory principal's DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound permissions, and present that data to the operator. Additionally, the loggin...

6.3AI score
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•21 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: It is required that the minimum ACE size is respected in smbcheckpermdacl. Both ACE-walking loops in smbcheckpermdacl only protect against a remaining buffer being undersized, not against an ACE whose declared ace-size ...

8.3CVSS6.5AI score0.00323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/28 12:40 p.m.•16 views

CVE-2026-98114

A flaw was found in the Linux kernel's ksmbd server. The Discretionary Access Control List DACL parsing logic silently ignores errors caused by truncated access control entries and memory allocation failures, allowing the system to continue with an incomplete permission conversion. A remote...

5.5CVSS5.9AI score0.00168EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/09/25 11:46 p.m.•22 views

SUSE CVE-2026-98114

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

5.9AI score0.00168EPSS
SaveExploits0References2
osv-debian
osv-debian
•added 2026/09/25 11:17 a.m.•12 views

DEBIAN-CVE-2026-98114

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

6.1AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•14 views

CVE-2026-98114

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

0.00168EPSS
SaveExploits0References4
osv-azl
osv-azl
•added 2026/09/25 11:17 a.m.•15 views

AZL-104481 CVE-2026-98114 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

5.9AI score0.00168EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2026/09/25 11:17 a.m.•12 views

UBUNTU-CVE-2026-98114

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

6.1AI score0.00168EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/25 10:36 a.m.•20 views

EUVD-2026-86945

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

5.9AI score0.00168EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 10:36 a.m.•32 views

CVE-2026-98114

The Linux kernel 's ksmbd component is vulnerable to an issue where the parse_dacl() function silently accepts truncated ACEs and allocation failures. This allows set_info_sec() to proceed with an incomplete ACL conversion, potentially leading to incorrect permission handling. The fix involves re...

5.9AI score0.00168EPSS
SaveExploits0References4
osv-cve
osv-cve
•added 2026/09/25 10:36 a.m.•16 views

CVE-2026-98114 ksmbd: propagate DACL parsing errors

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

5.8AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/25 10:36 a.m.•46 views

CVE-2026-98114 ksmbd: propagate DACL parsing errors

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

0.00168EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•14 views

CVE-2026-98114: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

5.9AI score0.00168EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/25 12:00 a.m.•16 views

CVE-2026-98114

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

5.9AI score0.00168EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-98114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL...

5.8AI score0.00168EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•10 views

PT-2026-98776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ksmbd module fails to properly handle errors during the parsing of Discretionary Access Control Lists DACL, which are lists that specify which users or groups are granted access to a...

9.8CVSS5.8AI score0.00511EPSS
SaveExploits0References407
Tenable Nessus
Tenable Nessus
•added 2026/08/15 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-72382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit i...

8.8CVSS7.6AI score0.00631EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/25 8:50 a.m.•55 views

CVE-2026-64379 smb: client: mask server-provided mode to 07777 in modefromsid

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parsedacl applies the server-provided subauth2 value from the NFS mode SID to cfmode without masking to 07777. Apply the correct masking,...

7.1CVSS0.00309EPSS
SaveExploits0References8
Rows per page
Query Builder