PT-2025-36935

Name of the Vulnerable Software and Affected Versions: CoreDNS versions 1.2.0 through 1.12.3 Description: CoreDNS, a DNS server that chains plugins, contains a TTL confusion vulnerability within the etcd plugin. This flaw arises from the incorrect use of lease IDs as TTL values, potentially...

ksmbd: fix use-after-free in __smb2_lease_break_noti()

...

ksmbd: fix potential use-after-free in oplock/lease break ack

...

smb: client: fix potential UAF in smb2_is_valid_lease_break()

...

Malicious code in test-mlw2-squat-lease (npm)

The package test-mlw2-squat-lease was found to contain malicious code...

Malicious code in test-mlw2-nonce-lease (npm)

The package test-mlw2-nonce-lease was found to contain malicious code...

MAL-2025-36329 Malicious code in test-mlw2-squat-lease (npm)

The package test-mlw2-squat-lease was found to contain malicious code...

MAL-2025-35879 Malicious code in test-mlw2-nonce-lease (npm)

The package test-mlw2-nonce-lease was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-37962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parseleasestate The previous patch that added bounds check for...

Linux Distros Unpatched Vulnerability : CVE-2025-37871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sccount directly if fail to queue dlrecall A deadlock warning occurred when...

Linux Distros Unpatched Vulnerability : CVE-2025-22042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: add bounds check for create lease context Add missing bounds check for create lease context. CVE-2025-22042 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2023-1194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds OOB memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When ...

Linux Distros Unpatched Vulnerability : CVE-2025-38437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbdiovpinrsp return error, use- after-free can happen by accessing opinfo-state and opinfoput...

Linux Distros Unpatched Vulnerability : CVE-2025-37954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: Avoid race in opencacheddir with lease breaks A pre-existing valid cfid returned from findorcreatecacheddir might race with a lease break, meaning...

Linux Distros Unpatched Vulnerability : CVE-2025-37777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free in smb2leasebreaknoti Move tcptransport free to ksmbdconnfree. If ksmbd connection is referenced when ksmbd server thread terminates, ...

SUSE CVE-2025-38437

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbdiovpinrsp return error, use-after-free can happen by accessing opinfo-state and opinfoput and ksmbdfdput could called twice...

Pi-Hole Web 4.3.2 < 4.3.3 RCE

The version of Pi-Hole Web running on the remote web server is 4.3.2 prior to 4.3.3. It is, therefore, affected by a remote code execution vulnerability by privileged dashboard users via a crafted DHCP static lease. Note that Nessus has not tested for this issue but has instead relied only on the...

DEBIAN-CVE-2025-38437

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbdiovpinrsp return error, use-after-free can happen by accessing opinfo-state and opinfoput and ksmbdfdput could called twice...

AZL-65702 CVE-2025-38437 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbdiovpinrsp return error, use-after-free can happen by accessing opinfo-state and opinfoput and ksmbdfdput could called twice...

UBUNTU-CVE-2025-38437

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbdiovpinrsp return error, use-after-free can happen by accessing opinfo-state and opinfoput and ksmbdfdput could called twice...