Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Run setinfo with the opener credentials. SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. These helpers perform their own checks for ownership, inode permission...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Added a WRITEDAC/WRITEOWNER check to the SMB2 SETINFO SECURITY mechanism. The commit cc57232cae23 "ksmbd: Fixes a FSCTL permission bypass by adding a permission check for FSCTLSETSPARSE" added a fp-daccess check to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Rejects undersized DACLs before parsing ACEs The parsedacl function limits the number of attacker-controlled ACE entries by comparing it with the minimum number of ACE entries that fit within the DACL size. The DACL size...

SUSE CVE-2026-64393

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

CVE-2026-64393: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

CVE-2024-36272

A buffer overflow vulnerability exists in the usbip.cgi setinfo functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2024-36272: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in the usbip.cgi setinfo functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...