kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

ALSA-2026:23329 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 kernel: smb: client: fix OO...

CLSA-2024-1722977984 kernel: Fix of 16 CVEs

ima: Fix use-after-free on a dentry's dname.name CVE-2024-39494 - ima: define imamaxdigestdata struct without a flexible array variable - ima: detect changes to the backing overlay file - tcp: Use refcountincnotzero in tcptwskunique. CVE-2024-36904 - afunix: Fix garbage collector racing against...

Boundary failure when parsing SMB responses

Description Secunia Research reported a vulnerability that allows for the execution of arbitrary code in smbd. This defect is is a result of an incorrect buffer size when parsing SMB replies in the routine receivesmbraw. Patch Availability A patch addressing this defect has been posted to...

ISS Security Brief: Vulnerability in SMB Parsing in ISS Products

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief February 26, 2004 Vulnerability in SMB Parsing in ISS Products Synopsis: A vulnerability was discovered in the SMB Server Message Block protocol parsing routines of the ISS Protocol Analysis Module PAM component found in...

ISS multiple products SMB parsing buffer overflow

Remote buffer overflow during SMB parsing leads to system account compromise...