Russh: Channel-scoped server callbacks can be reached without an open channel

There is a server-side channel state issue in russh. After a client is authenticated, russh can dispatch channel-scoped handler callbacks for recipient channel IDs that were never opened or confirmed. In the strongest reproduced case, the client does not send SSHMSGCHANNELOPEN at all. It...

EUVD-2026-52337

Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confirmed in russh/src/server/encrypted.rs, serverreadauthenticated, and the execrequest callback. Version 0.62.5 fixes the issue...

The vulnerability of the `ksmbd_conn_init_server_callbacks()` function in the `fs/smb/server/connection.c` module of the SMB server support module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ksmbdconninitservercallbacks function in the fs/smb/server/connection.c module of the SMB server support module in the Linux operating system is related to errors in resource usage counters. Exploiting this vulnerability could allow an attacker to cause a service failure...