CVE-2026-89630

In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the dataoffset bound in isvalidoplockbreak Commit 83bfbd0bb902 "cifs: Remove the RFC1002 header from smbhdr" changed the quantity this bound is measured against. It used to be srv-totalread minus the 4-byte...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Linux 커널 로컬 권한 상승 LPE Linux 커널 CIFS/SMB 클라이언트에 영향을 미치는 로컬 권한 상승 취약점. 📖 개요 CVE-2026-46243 은 Linux 커널의 CIFS/SMB 클라이언트에 존재하는 로컬 권한 상승LPE 취약점입니다. cifs.spnego 키 설명에 대한 부적절한 검증으로 인해 특정 시스템 구성에서 권한이 없는 로컬 사용자가 커널이 생성한 신뢰된 요청을 가장할 수 있으며, 잠재적으로 권한 상승으로 이어질 수 있습니다. ✨ 주요 정보 📌 영향...

PT-2026-90346

In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the data offset bound in is valid oplock break Commit 83bfbd0bb902 "cifs: Remove the RFC1002 header from smb hdr" changed the quantity this bound is measured against. It used to be srv-total read minus the...

PT-2026-90350

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlink data error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlink data" compared the post-ALIGN length against the remaining...

PT-2026-90348

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse buf ptr reparse buf ptr reads buf-ReparseDataLength before checking that count covers the full fixed header: buf = struct reparse data buffer u8 io + off; len =...

PT-2026-90347

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon bounds its strnlen over the byte area with the server's ByteCount minus two, which for ByteCount 0 or 1 goes negative as an int and converts to a...

PT-2026-90352

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-tgthint in free tgts When free tgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cache dfs tgt structures. If ce-tgthint is not reset before it is used later, it results ...

PT-2026-90349

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce t2 coalesce t2 computes data pointers directly from server-supplied DataOffset fields with no validation against buffer bounds: data area of tgt = char...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Уязвимость удаленного выполнения кода в Windows SMB 🚨 🔥 Высококритичное аутентифицированное удаленное выполнение кода 🔥 Неправильный контроль доступа в клиенте Windows SMB CWE-284 🛡️ Ключевые детали с первого взгляда...

kernel: smb: client: fix double-free in SMB2_close() replay

A flaw was found in the Linux kernel's Server Message Block SMB client. A vulnerability exists in the SMB2close replay mechanism where a response buffer can be freed twice. This double-free condition can lead to memory corruption, potentially resulting in a denial of service or the execution of...

AlmaLinux 8 : kernel (ALSA-2026:66000)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66000 advisory. kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel:...

windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB 클라이언트 취약점 연구 프레임워크 저자: cyberseallll 작성일: 2025 개요 저는 CVE-2025-33073, Windows SMB 클라이언트 권한 상승 취약점을 분석하고 이해하기 위해 이 연구 프레임워크를 개발했습니다. 이 구현은 취약점 연구와 통제된 테스트 환경을 위한 포괄적인 도구를 제공합니다. 취약점 세부 정보 CVE-2025-33073 은 Windows SMB 클라이언트 구현에 영향을 미치는 네트워크 접근 가능 권한 상승 취약점입니다. 이 취약점은 SMB 프로토콜 스택 내 부적절한 접근...

cifswitch-check

cifswitch-check Скрипт для оболочки, проверяющий, подвержена ли система Linux уязвимости CIFSwitch CVE-2026-46243 — локальной уязвимости повышения привилегий в клиенте CIFS/SMB ядра Linux, присутствующей с 2007 года. Работает на физических хостах, виртуальных машинах и внутри контейнеров...

kernel: smb: client: validate DFS referral PathConsumed

A flaw was found in the Linux kernel's Server Message Block SMB client. A remote attacker could send a specially crafted SMB response containing a malformed Distributed File System DFS referral. This could cause the PathConsumed value to exceed the search name length, leading to an out-of-bounds...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:64770 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...