Lucene search
K

70 matches found

SUSE CVE
SUSE CVE
added 2026/05/09 2:41 a.m.3 views

SUSE CVE-2026-43184

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

7.5CVSS5.8AI score0.00046EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/05/06 8:47 p.m.2 views

CVE-2026-43184

A flaw was found in the Linux kernel's rnbd-srv component. This vulnerability arises from the failure to properly clear the response buffer before sending data. A remote client could potentially receive unintended data, leading to information disclosure...

7.5CVSS5.9AI score0.00046EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/06 12:30 p.m.2 views

EUVD-2026-27744

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

5.8AI score0.00046EPSS
Exploits0References9
NVD
NVD
added 2026/05/06 12:16 p.m.2 views

CVE-2026-43184

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

7.5CVSS0.00046EPSS
Exploits0References8
CVE
CVE
added 2026/05/06 11:27 a.m.3 views

CVE-2026-43184

CVE-2026-43184 affects the Linux kernel component rnbd-srv. The root cause is failing to clear the response buffer before sending data, which could allow a remote client to receive unintended data when exchanging messages across protocol versions. Multiple vendors have patched this vulnerability ...

7.5CVSS5.8AI score0.00046EPSS
Exploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/06 11:27 a.m.3 views

CVE-2026-43184

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

5.8AI score0.00046EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2026/05/06 11:27 a.m.21 views

CVE-2026-43184 rnbd-srv: Zero the rsp buffer before using it

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

7.5CVSS0.00046EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2026/05/06 11:27 a.m.2 views

CVE-2026-43184

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

7.5CVSS5.8AI score0.00046EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-43184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes ...

7.5CVSS5.9AI score0.00046EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2allocaterspbuf The response buffer should be allocated in smb2allocaterspbuf before validating request. But the fields in payload as well as smb2 header is used in smb2allocaterspbuf. Th...

7.8CVSS6.4AI score0.00024EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/04/22 6:35 p.m.4 views

CVE-2026-31478

A flaw was found in ksmbd within the Linux kernel. This vulnerability occurs due to an incorrect calculation of the response buffer length in the smb2calcmaxoutbuflen function. The function used a hardcoded value instead of the proper offset, which could lead to issues in how response buffers are...

9.8CVSS5.9AI score0.00097EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/22 3:31 p.m.2 views

EUVD-2026-24835

In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2len with offsetof in smb2calcmaxoutbuflen After this commit e2b76ab8b5c9 "ksmbd: add support for read compound", response buffer management was changed to use dynamic iov array. In the new design,...

5.8AI score0.00097EPSS
Exploits0References8
CVE
CVE
added 2026/04/22 1:54 p.m.8 views

CVE-2026-31478

The CVE-2026-31478 issue affects ksmbd in the Linux kernel. The root cause is an incorrect calculation of the response buffer length in smb2_calc_max_out_buf_len(), where a hardcoded hdr2_len was used instead of the correct offset to the Buffer field. The security advisories describe that after a...

9.8CVSS5.8AI score0.00097EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2026/04/22 1:54 p.m.29 views

CVE-2026-31478 ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2len with offsetof in smb2calcmaxoutbuflen After this commit e2b76ab8b5c9 "ksmbd: add support for read compound", response buffer management was changed to use dynamic iov array. In the new design,...

9.8CVSS0.00097EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.3 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the use of a hardcoded value for hdr2len, potentially leading to errors in response buffer management...

9.8CVSS5.9AI score0.00097EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.3 views

PT-2026-34383

In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2 len with offsetof in smb2 calc max out buf len After this commit e2b76ab8b5c9 "ksmbd: add support for read compound", response buffer management was changed to use dynamic iov array. In the new desig...

5.8AI score0.00097EPSS
Exploits0References8
CVE
CVE
added 2025/12/16 2:45 p.m.7 views

CVE-2025-68263

In CVE-2025-68263, the Linux kernel ksmbd IPC path had a use-after-free in ipc_msg_send_request caused by freeing entry->response without holding ipc_msg_table_lock while handle_response() can still write to it. The race occurs under high concurrency when handle_response() copies to entry->...

9.8CVSS6AI score0.00092EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-3548

Malware in sbrugna...

7.8CVSS7.6AI score0.00033EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-5332

Malware in sbrugna...

7.8CVSS7.6AI score0.00043EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-9041

Malware in sbrugna...

10CVSS9.5AI score0.00206EPSS
Exploits0References3
Rows per page
Query Builder