267 matches found
kernel: smb: client: validate DFS referral PathConsumed
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote attacker could send a specially crafted SMB response containing a malformed Distributed File System DFS referral. This could cause the PathConsumed value to exceed the search name length, leading to an out-of-bounds...
kernel security, bug fix, and enhancement update
5.14.0-687.41.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
CVE-2026-72318
A flaw was found in the Linux kernel's CIFS component. A remote attacker could exploit this vulnerability by providing a specially crafted Distributed File System DFS referral. The system fails to properly validate string offsets within these referrals, which can lead to an out-of-bounds read. Th...
CVE-2026-72318
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
CVE-2026-72318
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
UBUNTU-CVE-2026-72318
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
CVE-2026-72318
CVE-2026-72318 affects the Linux kernel CIFS/SMB path handling. The flaw arises in parse_dfs_referrals(), where string offsets in DFS referrals are not validated against the received buffer, allowing crafted referrals to cause pointers to read outside the buffer. This can lead to out-of-bounds re...
EUVD-2026-59217
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
CVE-2026-72318 cifs: validate DFS referral string offsets
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
CVE-2026-72318 cifs: validate DFS referral string offsets
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
Linux Distros Unpatched Vulnerability : CVE-2026-72318
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral...
PT-2026-72506
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parse dfs referrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets...
CVE-2026-68343
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote attacker could send a specially crafted SMB response containing a malformed Distributed File System DFS referral. This could cause the PathConsumed value to exceed the search name length, leading to an out-of-bounds...
CVE-2026-68343
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response contains the fixed referral entry array and, on for-next, the per-referral string offsets. However, the response also contains a...
CVE-2026-68343
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response contains the fixed referral entry array and, on for-next, the per-referral string offsets. However, the response also contains a...
UBUNTU-CVE-2026-68343
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response contains the fixed referral entry array and, on for-next, the per-referral string offsets. However, the response also contains a...
CVE-2026-68343 smb: client: validate DFS referral PathConsumed
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response contains the fixed referral entry array and, on for-next, the per-referral string offsets. However, the response also contains a...
Linux Distros Unpatched Vulnerability : CVE-2026-68343
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response contains the fixed referral entry array and, on for-next, the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211 – Use safe list iteration in radar detect work The call to ieee80211dfscac Cancel can cause the iterated chanctx to be freed and removed from the list. This issue needs to be guarded against to avoid a...
