ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE

...

CVE-2026-52944

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTLSETSPARSE FSCTLSETSPARSE in fsctlsetsparse modifies the file's sparse attribute and saves it through xattr without any permission checks. This exposes two...

June 14, 2022—KB5014702 (OS Build 14393.5192) - EXPIRED

None None...

June 14, 2022—KB5014710 (OS Build 10240.19325) - EXPIRED

None None...

Unrestricted file upload

An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the POST parameter filename. This can be used to place attacker controlled code on the file system that can then be executed. Further, the filename parameter is...