aced

Aced Aced 是一个用于解析和解析单个目标 Active Directory 主体的 DACL 的工具。Aced 将识别针对目标账户的允许入站访问权限中的感兴趣权限，解析入站权限的 SID，并将这些数据呈现给操作员。此外，pyldapsearch 的日志功能已集成到 Aced 中，可以在本地记录目标主体的 LDAP 属性，然后由 pyldapsearch 的配套工具 BOFHound 解析这些属性，以便将收集的数据导入 BloodHound。 用例？ 我编写 Aced 仅仅是因为我想要一种更有针对性的方式来查询 ACL。Bloodhound 很棒，但它极其嘈杂。Bloodhound...

CVE-2026-98114

The Linux kernel 's ksmbd component is vulnerable to an issue where the parse_dacl() function silently accepts truncated ACEs and allocation failures. This allows set_info_sec() to proceed with an incomplete ACL conversion, potentially leading to incorrect permission handling. The fix involves re...

EUVD-2026-86945

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

CVE-2026-98114

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

Linux Distros Unpatched Vulnerability : CVE-2026-72382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit i...

CVE-2026-64379 smb: client: mask server-provided mode to 07777 in modefromsid

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parsedacl applies the server-provided subauth2 value from the NFS mode SID to cfmode without masking to 07777. Apply the correct masking,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: It is required that the minimum ACE size is respected in smbcheckpermdacl. Both ACE-walking loops in smbcheckpermdacl only protect against a remaining buffer being undersized, not against an ACE whose declared ace-size ...