251 matches found
EUVD-2026-106327
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Multichannel Framework. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-83427
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Multichannel Framework. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-83427
A vulnerability exists in the Multichannel Framework component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may resul...
CVE-2026-90169
A flaw was found in ksmbd within the Linux kernel. A remote attacker could exploit this vulnerability by initiating an SMB3.1.1 multichannel binding connection and then disconnecting after the NTLM negotiate request but before the authenticate request. This failure to properly free...
PT-2026-119604
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Multichannel Framework. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...
Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities
Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Multichannel Framework component, which may allow high-privilege attackers to take control of PeopleSoft Enterprise PeopleTools through HTTP network access...
CVE-2026-98173
A flaw was found in the Linux kernel's SMB client. A race condition in multichannel connection management allows network interface structures to be freed while still in use during concurrent interface refreshes. A malicious server or an attacker triggering interface updates can exploit this...
Astra Linux – Vulnerability in Linux 5.15
A flaw was discovered in the ksmbd component of the Linux kernel. A race condition between the smb2 close operation and logoff in multi-channel connections could lead to a use-after-free issue...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not expire a session when a binding attempt fails. When a multichannel session binding request fails e.g., due to an incorrect password, the error path unconditionally sets sess-state to SMB2SESSIONEXPIRED. However,...
SUSE CVE-2026-98115
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
DEBIAN-CVE-2026-98115
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
AZL-104675 CVE-2026-98115 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
UBUNTU-CVE-2026-98115
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115 ksmbd: safely drain sessions during logoff
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115
The Linux kernel contains a vulnerability in ksmbd regarding the handling of SMB3 multichannel requests. The issue arises because shared session objects may be freed before all bound channels are processed. Additionally, a deferred byte-range lock can remain counted as a running request, waking o...
EUVD-2026-86946
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115 ksmbd: safely drain sessions during logoff
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115: Concurrent Execution using Shared Resource with Improper Synchronization
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...