91 matches found
AZL-106017 CVE-2026-98167 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
DEBIAN-CVE-2026-98167
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
CVE-2026-98167
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
CVE-2026-98171
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...
UBUNTU-CVE-2026-98171
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...
CVE-2026-98171
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...
CVE-2026-98171
The Linux kernel contains a vulnerability in the SMB client during the handling of compound encrypted frames within the receive_encrypted_standard() function. The issue stems from several pointer lifecycle and bounds checking flaws: a stale next_buffer pointer can lead to a use-after-free on cert...
CVE-2026-98171 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...
CVE-2026-98171 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...
CVE-2026-98167 smb: client: fix server->total_read for compound encrypted PDUs
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
CVE-2026-98167
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
CVE-2026-98167
The Linux kernel SMB client contains a vulnerability in receive_encrypted_standard() where server->total_read incorrectly maintains the full decrypted frame size while processing sub-PDUs of a compound encrypted frame . This oversight causes cifs_handle_standard() to pass an incorrect size to ...
CVE-2026-98167 smb: client: fix server->total_read for compound encrypted PDUs
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
PT-2026-106496
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-total read for compound encrypted PDUs In receive encrypted standard, server-total read is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result, cifs handl...
Rocky Linux 10.0 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2025_10635)
The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510635 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block directly...
Rocky Linux 9 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2025_10631)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510631 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block directly from...
Rocky Linux 8 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2025_10742)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510742 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block directly from...
Debian dla-4804 : libsmpp34-1 - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4804 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4804-1 [email protected] https://www.debian.org/lts/security/...