Lucene search
+L

17 matches found

SUSE CVE
SUSE CVE
•added 2026/09/16 3:35 p.m.•11 views

SUSE CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS5.9AI score0.00167EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 9:17 a.m.•16 views

AZL-101150 CVE-2026-89792 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS5.9AI score0.00167EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/16 9:17 a.m.•22 views

CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS5.9AI score0.00167EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/16 9:17 a.m.•14 views

UBUNTU-CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS6AI score0.00167EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/16 8:50 a.m.•39 views

CVE-2026-89792 ksmbd: prevent out-of-bounds reads in share config responses

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS0.00167EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/09/16 8:50 a.m.•24 views

CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS6AI score0.00167EPSS
SaveExploits0
OSV
OSV
•added 2026/09/16 8:50 a.m.•24 views

CVE-2026-89792 ksmbd: prevent out-of-bounds reads in share config responses

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS5.8AI score
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•10 views

CVE-2026-89792: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

7.1CVSS5.9AI score0.00167EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/05/02 1:25 a.m.•30 views

SUSE CVE-2026-31707

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipcvalidatemsg ipcvalidatemsg computes the expected message size for each response type by adding or multiplying attacker-controlled fields from the daemon response to a fixed struct size in...

7.1CVSS5.8AI score0.00174EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/01 2:16 p.m.•25 views

CVE-2026-31707

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipcvalidatemsg ipcvalidatemsg computes the expected message size for each response type by adding or multiplying attacker-controlled fields from the daemon response to a fixed struct size in...

7.1CVSS0.00174EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/01 1:56 p.m.•25 views

CVE-2026-31707 ksmbd: validate response sizes in ipc_validate_msg()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipcvalidatemsg ipcvalidatemsg computes the expected message size for each response type by adding or multiplying attacker-controlled fields from the daemon response to a fixed struct size in...

7.1CVSS6.5AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/05/01 1:56 p.m.•39 views

EUVD-2026-26516

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipcvalidatemsg ipcvalidatemsg computes the expected message size for each response type by adding or multiplying attacker-controlled fields from the daemon response to a fixed struct size in...

5.8AI score0.00174EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/01 1:56 p.m.•77 views

CVE-2026-31707

The CVE-2026-31707 issue affects the Linux kernel ksmbd component. The overflow vulnerability in ipc_validate_msg() arises from arithmetic on attacker-controlled fields when computing per-response message sizes, allowing wraparound in three cases (RPC_REQUEST, SHARE_CONFIG_REQUEST, LOGIN_REQUEST_...

7.1CVSS6.4AI score0.00174EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/05/01 1:56 p.m.•58 views

CVE-2026-31707 ksmbd: validate response sizes in ipc_validate_msg()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipcvalidatemsg ipcvalidatemsg computes the expected message size for each response type by adding or multiplying attacker-controlled fields from the daemon response to a fixed struct size in...

7.1CVSS0.00174EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•22 views

PT-2026-36337

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the ipc validate msg function within the ksmbd module. The function calculates the expected message size for response types by performing unsigned integer...

7.1CVSS6.9AI score0.00174EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/05 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-23428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of shareconf in compound request smb2getksmbdtcon reuses work-tcon...

9.8CVSS7.7AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/17 12:00 a.m.•25 views

PT-2026-30123

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc3+ Description The Linux kernel contains a use-after-free flaw within the ksmbd component, specifically in how it handles share configurations during compound requests. The smb2 get ksmbd tcon function...

9.8CVSS7.8AI score0.00331EPSS
SaveExploits0
Rows per page
Query Builder