CVE-2026-64141

A flaw was found in the ksmbd component of the Linux kernel. A remote attacker can trigger a null pointer dereference by negotiating a new session with a specific client identifier ClientGuid and issuing a Server Message Block SMB2 CREATE request with a lease context on a different inode after a...

CVE-2026-64048

A flaw was found in the Linux kernel's Server-Message-Block Direct SMC-D client. A remote attacker can exploit this vulnerability by sending a specially crafted SMC-Dv2 proposal with a Channel Identifier CHID of 0. This malicious proposal can cause a null pointer dereference in the kernel's SMC...

CVE-2026-64136 smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tccount increment in smb2findsmbsesstconunlocked Commit 96c4af418586 "cifs: Fix locking usage for tcon fields" refactored cifs code to change cifstcpseslock for tclock around tccount changes. There was missin...

EUVD-2026-45821

In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tccount increment in smb2findsmbsesstconunlocked Commit 96c4af418586 "cifs: Fix locking usage for tcon fields" refactored cifs code to change cifstcpseslock for tclock around tccount changes. There was missin...

PT-2026-61226

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb check perm dacl ACE-walk loops Commit d07b26f39246 "ksmbd: require minimum ACE size in smb check perm dacl" introduced a transposed bounds check: if offsetofstruct smb ace, sid + aces size size...

kernel: smb: client: fix OOB reads parsing symlink error response

A flaw was found in the Linux kernel's Server Message Block SMB client. A remote, untrusted server could send a specially crafted symlink error response, leading to an out-of-bounds read vulnerability. This could result in the disclosure of sensitive information from the kernel's memory to a loca...

USN-8546-1: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

CVE-2026-57089

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

CVE-2026-50360

Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-58531 Windows SMB Elevation of Privilege Vulnerability

...

CVE-2026-58531

CVE-2026-58531 is a Windows SMB elevation-of-privilege vulnerability caused by a race condition in a shared resource. It affects Windows SMB components and enables an authorized attacker to elevate privileges over the network. CVSS v3.1 base score 7.5 (NETWORK, HIGH impact), per Microsoft’s advis...

CVE-2026-58531 Windows SMB Elevation of Privilege Vulnerability

...

CVE-2026-57089

Summary : CVE-2026-57089 affects the Windows SMB Server Network Transport Driver (srvnet.sys). The issue is a use-after-free memory corruption bug that can be triggered by an unauthenticated attacker over the network to achieve remote code execution. The vulnerability is listed with high to criti...

CVE-2026-50690 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-50690

CVE-2026-50690 is a Windows SMB information-disclosure vulnerability described as caused by the use of an uninitialized resource within Windows SMB that can allow an authorized local attacker to disclose information. The CVE is linked to Microsoft advisories and MSRC updates addressing the issue,...

CVE-2026-50690 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-50360 Windows SMB Server Elevation of Privilege Vulnerability

...

CVE-2026-50360 Windows SMB Server Elevation of Privilege Vulnerability

...

CVE-2026-50360

The CVE-2026-50360 entry describes an Elevation of Privilege in Windows SMB Server caused by an incorrect authentication algorithm, allowing an authorized attacker to elevate privileges over the network. Published CVSS v3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 8.8, HIGH). Windows has...

CVE-2026-49801 Windows SMB Information Disclosure Vulnerability

...