Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: smb/server: fixed a potential null-ptr-deref of leasectxinfo in smb2open A null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate returns NULL. This issue was fixed by checking whether...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Added a bounds check for the create lease context. A missing bounds check was added for the create lease context...

DHCPig

DHCPig 白帽 DHCP 加固验证：耗尽地址池，劫持邻居的租约，通过伪造 ARP 将主机从其地址上驱逐，并报告网络是否阻止了你。需要 root 权限和 Python 3.11+。 运行 Web UI Debian / Kali： 从 Releases 获取最新的 .deb 并安装 —— 会将 dhcpig 和 dhcpig-web 加入 PATH，无需 venv： root@kitploit: curl -LO https://github.com/kamorin/DHCPig/releases/download/v2.7.2/dhcpig2.7.2-1all.deb sudo ap...

Linux Distros Unpatched Vulnerability : CVE-2026-89647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: do not repeat cephtrimdentries if no progress possible cephcapreclaimwork re-queues itself for as long as cephtrimdentries returns -EAGAIN, which happens...

CVE-2026-89647

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat cephtrimdentries if no progress possible cephcapreclaimwork re-queues itself for as long as cephtrimdentries returns -EAGAIN, which happens whenever a lease walk exhausts its nrtoscan budget. This creates a bu...

DEBIAN-CVE-2026-89647

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat cephtrimdentries if no progress possible cephcapreclaimwork re-queues itself for as long as cephtrimdentries returns -EAGAIN, which happens whenever a lease walk exhausts its nrtoscan budget. This creates a bu...

Astra Linux – Vulnerability in isc-dhcp

In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP e.g., releases in the 4.0.x series or earlier, and releases in the 4.3.x series are beyond their End-of-Life period and are no longer supported by ISC. It is clear that this defect is also present in releases...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: cifs: fixed potential OOPs in cifsoplockbreak With deferred close, there may be situations where closes cause races with lease breaks. Additionally, when checking whether to send the lease response, oplockresponse can lead to ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfsd: The value of sccount is decreased directly if the dlrecall queue operation fails. A deadlock warning occurred when invoking nfs4putstid after a failed dlrecall queue operation: T1 T2 nfs4laundromat nfs4getclientreaplist...

Astra Linux – Vulnerability in isc-dhcp

In ISC DHCP 4.4.0 - 4.4.3, and ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addOption, it increments the refcount field of the option. However, there is no corresponding call to optiondereference to decrement the refcount field. The function addOptio...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A memory leak was fixed in the parseleasestate function. The previous patch that added a bounds check for the create lease context introduced a memory leak. When the bounds check fails, the function returns NULL, without...

CVE-2026-71092

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

EUVD-2026-62036

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

BIT-OPENBAO-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

CVE-2026-72492

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in sameclienthaslease sameclienthaslease returns an opinfo pointer from ci-moplist after dropping ci-mlock without taking a reference. smbgrantoplock then dereferences that pointer in copylease and when...

CVE-2026-74285

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netifrxqcleanupunlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

CVE-2026-74285 net: Stop leased rxq before uninstalling its memory provider

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netifrxqcleanupunlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

EUVD-2026-59391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in sameclienthaslease sameclienthaslease returns an opinfo pointer from ci-moplist after dropping ci-mlock without taking a reference. smbgrantoplock then dereferences that pointer in copylease and when...

CVE-2026-72492

The CVE-2026-72492 issue concerns ksmbd (Linux kernel) where same_client_has_lease() returns an opinfo pointer from ci->m_op_list after dropping ci->m_lock without holding a reference. smb_grant_oplock() later dereferences this pointer in copy_lease() and while checking breaking_cnt, riskin...

PT-2026-72680

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same client has lease same client has lease returns an opinfo pointer from ci-m op list after dropping ci-m lock without taking a reference. smb grant oplock then dereferences that pointer in copy lea...