Linux parse_dfs_referrals() Heap Buffer Overflow

The vulnerability of the parsedfsreferrals function in the fs/smb/client/misc.c file of the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Validates DFS referral PathConsumed. The parsedfsreferrals function validates that the response contains the corrected referral entry array, as well as the per-referral string offsets. However, the response also...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit within the received buffer; however, each referral also contains string offsets provided by the server. These...

ROS-20260923-73-0053

The vulnerability of the parsedfsreferrals function in the fs/smb/client/misc.c module of the SMB client support library in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-72318: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...

CVE-2026-72318: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...

Linux SMB Client Parse DFS Referrals Heap Buffer Overflow DoS

The vulnerability of the parsedfsreferrals function in the fs/smb/client/misc.c module of the SMB client support library in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-40099: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTLDFSGETREFERRALS - reply smaller than sizeofstruct getdfsreferralrsp - reply with number of referrals smaller than...