PT-2026-94501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the smb check perm dacl function incorrectly bounds its Access Control Entry ACE walks by the remaining NT security descriptor NTSD length acl...

CVE-2026-63909

A flaw was found in the ksmbd component of the Linux kernel. A transposed bounds check in the smbcheckpermdacl function can lead to a 2-byte heap out-of-bounds OOB read during Server Message Block SMB2 create operations. This vulnerability may allow a remote attacker to disclose sensitive...

CVE-2026-63909

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smbcheckpermdacl ACE-walk loops Commit d07b26f39246 "ksmbd: require minimum ACE size in smbcheckpermdacl" introduced a transposed bounds check: if offsetofstruct smbace, sid + acessize size offset 2...

CVE-2026-63909 ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smbcheckpermdacl ACE-walk loops Commit d07b26f39246 "ksmbd: require minimum ACE size in smbcheckpermdacl" introduced a transposed bounds check: if offsetofstruct smbace, sid + acessize size offset 2...

CVE-2026-53390 ksmbd: fix out-of-bounds read in smb_check_perm_dacl()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smbcheckpermdacl The permission-check ACE walk in smbcheckpermdacl validates the ACE header size and caps sid.numsubauth at SIDMAXSUBAUTHORITIES, but it never checks that ace-size is actually larg...

PT-2026-61095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ksmbd component. The smb check perm dacl function fails to verify if the ace-size is sufficient to contain the number of sub-authorities specified by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-011320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011320 advisory. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in...

DEBIAN-CVE-2022-49366

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in smbcheckpermdacl. When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference...

PT-2025-8300

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the ksmbd module. The problem occurs when the id and uid have the same value in the smb check perm dacl...

PT-2022-31555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-30881

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-31239

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

Nmap NSE 6.01: smb-check-vulns

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: smb-check-vulns

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: SMB Check Vulnerabilities

This script attempts to check the following vulnerabilities: - MS08-067, a Windows RPC vulnerability - Conficker, an infection by the Conficker worm - Unnamed regsvc DoS - SMBv2 exploit CVE-2009-3103 This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-check-vulns.nse. OpenVAS...