CVE-2026-98686

The Linux kernel contains a vulnerability in the smb client component where smb3_zero_range() fails to discard the pagecache for folios straddling the old EOF when extending a file via a zero range. This allows data dirtied past the EOF—potentially through an mmap —to remain in the pagecache and ...

CVE-2026-98685

The Linux kernel contains a vulnerability in the smb client where the cifs_remap_file_range() function fails to correctly discard the pagecache when extending a file via a clone range. Specifically, folios straddling the old EOF (which might contain data dirtied past the EOF via an mmap ) were no...

CVE-2026-98684

The Linux kernel contains a vulnerability in the smb3_simple_fallocate_range() function's emulation of mode 0 / FALLOC_FL_KEEP_SIZE for small interior ranges. The issue arises because the system issues FSCTL_QUERY_ALLOCATED_RANGES and zero-fills reported unallocated holes to force block allocatio...

CVE-2026-98454

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-98454

The Linux kernel contains an out-of-bounds read vulnerability within the smb client component. The smb2_parse_contexts() function fails to limit each record to its Next field before dispatching, allowing a malformed chain to expose bytes beyond the current context. Additionally, the QFid handler ...

CVE-2026-98454 smb: client: fix create context out-of-bounds reads

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

EUVD-2026-103694

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98452

The Linux kernel contains a vulnerability in the SMB client where open_cached_dir() fails to properly handle compound requests. Specifically, if a CREATE succeeds but a subsequent command in the compound request returns an error, the system fails to retain the CREATE FID for proper cleanup using ...

CVE-2026-98452 smb: client: clean up failed cached directory opens

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

CVE-2026-98451

The Linux kernel contains a vulnerability in the SMB client where an O_CREAT open operation on an existing symlink or non-regular inode causes a dentry reference leak . This occurs because cifs_atomic_open() calls finish_open() on these inodes, but symlink inodes lack a CIFS release operation. Th...

CVE-2026-98451 smb: client: use finish_no_open() for non-regular inodes

In the Linux kernel, the following vulnerability has been resolved: smb: client: use finishnoopen for non-regular inodes An OCREAT open can find an existing symlink or another non-regular inode. cifsatomicopen calls finishopen on it and attaches a cifsFileInfo. Symlink inodes have no CIFS release...

CVE-2026-98405

A flaw was found in the Linux kernel's SMB Server Message Block client. When parsing POSIX security identifiers in server responses, the client fails to properly validate the server-supplied buffer length against the actual received message boundaries. A malicious or compromised SMB server could...

Linux Distros Unpatched Vulnerability : CVE-2026-98405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parseposixsids In parseposixsids, sidsbufend is...

windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Windows SMB RCE Vulnerability 🚨 🔥 High-Severity Authenticated Remote Code Execution 🔥 Improper Access Control in Windows SMB Client CWE-284 🛡️ Key Details at a Glance Aspect| Details ---|--- CVSS v3.1 Score| 8.8 High 🔥 Affected Systems| Windows 10, 11, Server 2012–2025 all...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_81406)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202681406 advisory. kernel: thermal: core: Fix thermal zone device registration error path CVE-2026-43332 kernel: macsec: fix replay protection at XPN lower-PN wrap...

cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

AZL-108146 CVE-2026-98405 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parseposixsids In parseposixsids, sidsbufend is calculated using the server-supplied outlen without being validated against the actual length of the received iov iovlen. If a server...

CVE-2026-98405 smb: client: fix missing iov bounds check in parse_posix_sids()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parseposixsids In parseposixsids, sidsbufend is calculated using the server-supplied outlen without being validated against the actual length of the received iov iovlen. If a server...

CVE-2026-98405

The Linux kernel contains a vulnerability in the smb client component within the parse_posix_sids() function. The issue stems from a missing iov bounds check , where sidsbuf_end is calculated using a server-supplied out_len without being validated against the actual iov_len. This allows a malicio...