Lucene search
K

18 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux - уязвимость в linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: smb/server: fixed a potential null-ptr-deref of leasectxinfo in smb2open A null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate returns NULL. This issue can be fixed by checking whether...

5.5CVSS6.4AI score0.00013EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A memory leak was fixed in the parseleasestate function. The previous patch that added a bounds check for the create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without...

5.5CVSS6.4AI score0.0009EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-37962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parseleasestate The previous patch that added bounds check for...

5.5CVSS6.2AI score0.0009EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-1194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds OOB memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When ...

8.1CVSS6.8AI score0.00087EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/05/21 12:46 a.m.2 views

SUSE CVE-2025-37962

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parseleasestate The previous patch that added bounds check for create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without freeing the previously allocat...

5.5CVSS6.4AI score0.0009EPSS
Exploits0References3
OSV
OSV
added 2025/05/20 4:15 p.m.1 views

DEBIAN-CVE-2025-37962

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parseleasestate The previous patch that added bounds check for create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without freeing the previously allocat...

5.5CVSS5.6AI score0.0009EPSS
Exploits0References1
OSV
OSV
added 2025/05/20 4:15 p.m.0 views

UBUNTU-CVE-2025-37962

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parseleasestate The previous patch that added bounds check for create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without freeing the previously allocat...

5.5CVSS6.2AI score0.0009EPSS
Exploits0References27
CVE
CVE
added 2025/05/20 4:1 p.m.71 views

CVE-2025-37962

CVE-2025-37962 affects the Linux kernel’s ksmbd code path, specifically a memory leak in parse_lease_state. The root cause: when the created lease context bounds check fails, the function returns NULL without freeing the previously allocated lease_ctx_info, causing a memory leak. The patch fixes ...

5.5CVSS6.5AI score0.0009EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2025/05/20 4:1 p.m.9 views

CVE-2025-37962 ksmbd: fix memory leak in parse_lease_state()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parseleasestate The previous patch that added bounds check for create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without freeing the previously allocat...

0.0009EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.1 views

PT-2025-22223

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the parse lease state function of the ksmbd module. The problem arose from a previous patch that added bounds...

5.5CVSS6.6AI score0.0009EPSS
Exploits0
OSV
OSV
added 2024/09/18 8:15 a.m.3 views

AZL-49421 CVE-2024-46742 affecting package kernel for versions less than 5.15.182.1-1

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of leasectxinfo in smb2open null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate return NULL. Fix this by check if 'leasectxinfo' is NULL. Additionally,...

5.5CVSS6.8AI score0.00013EPSS
Exploits0References1
OSV
OSV
added 2024/09/18 8:15 a.m.2 views

DEBIAN-CVE-2024-46742

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of leasectxinfo in smb2open null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate return NULL. Fix this by check if 'leasectxinfo' is NULL. Additionally,...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2023/11/14 8:0 a.m.4 views

Use-after-free in parse_lease_state()

...

8.1CVSS7AI score0.00087EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2023/11/03 8:15 a.m.1 views

CVE-2023-1194

An out-of-bounds OOB memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of NameOffset in the parseleasestate...

8.1CVSS6.6AI score0.00087EPSS
Exploits0References5
OSV
OSV
added 2023/11/03 8:15 a.m.1 views

DEBIAN-CVE-2023-1194

An out-of-bounds OOB memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of NameOffset in the parseleasestate...

8.1CVSS6.8AI score0.00087EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/03/17 12:0 a.m.1 views

Vulnerability of the parse_lease_state() function (fs/ksmbd/oplock.c) in the SMB subsystem of the Linux operating system, allowing a hacker to trigger a service failure

The vulnerability of the parseleasestate function fs/ksmbd/oplock.c in the SMB subsystem of the Linux operating system is related to errors during variable initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

8.5CVSS0.00087EPSS
Exploits0References9Affected Software4
CNNVD
CNNVD
added 2023/03/10 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds read vulnerability that stems from an out-of-bounds read problem in the parseleasestate method of the KSMBD implementation of the...

8.1CVSS6.4AI score0.00087EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/03/07 3:13 a.m.1 views

SUSE CVE-2023-1194

An out-of-bounds OOB memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of NameOffset in the parseleasestate...

8.1CVSS6.2AI score0.00087EPSS
Exploits0References3
Rows per page
Query Builder