Lucene search
+L

5 matches found

SUSE CVE
SUSE CVE
•added 2026/07/25 4:00 p.m.•22 views

SUSE CVE-2026-64397

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERYDIRECTORY requests per file smb2querydir stores a pointer to its stack-allocated private data in the ksmbdfile readdirdata. Concurrent QUERYDIRECTORY requests using the same file handle can overwrite this...

7.5CVSS6.8AI score0.00477EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/07/25 10:17 a.m.•22 views

UBUNTU-CVE-2026-64397

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERYDIRECTORY requests per file smb2querydir stores a pointer to its stack-allocated private data in the ksmbdfile readdirdata. Concurrent QUERYDIRECTORY requests using the same file handle can overwrite this...

9.8CVSS7AI score0.00477EPSS
SaveExploits0References23
osv_cve
osv_cve
•added 2026/07/25 8:50 a.m.•28 views

CVE-2026-64397 ksmbd: serialize QUERY_DIRECTORY requests per file

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERYDIRECTORY requests per file smb2querydir stores a pointer to its stack-allocated private data in the ksmbdfile readdirdata. Concurrent QUERYDIRECTORY requests using the same file handle can overwrite this...

9.8CVSS5.7AI score
SaveExploits0References9
attackerkb
attackerkb
•added 2026/07/25 8:50 a.m.•23 views

CVE-2026-64397

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERYDIRECTORY requests per file smb2querydir stores a pointer to its stack-allocated private data in the ksmbdfile readdirdata. Concurrent QUERYDIRECTORY requests using the same file handle can overwrite this...

9.8CVSS6.9AI score0.00477EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2026/07/25 8:50 a.m.•97 views

CVE-2026-64397

CVE-2026-64397 affects the Linux kernel ksmbd component. The issue arises in smb2_query_dir() which stores a pointer to stack-allocated private data in ksmbd_file readdir_data; concurrent QUERY_DIRECTORY requests using the same file handle can overwrite this pointer while an iterate_dir() callbac...

9.8CVSS6.8AI score0.00477EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder