EUVD-2026-73481

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-69374

CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...

EUVD-2026-73479

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69403

CVE-2026-69403 is an information disclosure vulnerability in the Windows SMB Server component, caused by missing authorization that allows an authorized (low-privilege) local attacker to disclose information. The impact is limited to confidentiality with no integrity or availability impact. CNA-a...

CVE-2026-72949

CVE-2026-72949 is a null pointer dereference in the Windows SMB Server Network Transport Driver (srvnet.sys) that allows an unauthorized, network-based attacker to cause a denial of service . The Microsoft-assigned CVSS 3.1 score is 7.5 (HIGH) , reflecting low attack complexity, no required privi...

Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

Windows SMB Server Information Disclosure Vulnerability

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

PT-2026-87438

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69403: Missing Authorization

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69374: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-72949: NULL Pointer Dereference

Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...

PT-2026-87412

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

The vulnerabilities in the modules fs/smb/server/mgmt/user_session.c and fs/smb/server/smb2pdu.c of the SMB server support in Linux operating systems allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities in the modules fs/smb/server/mgmt/usersession.c and fs/smb/server/smb2pdu.c of the SMB support in Linux operating systems are related to the reutilization of previously freed memory. Exploiting these vulnerabilities can allow a remote attacker to compromise the confidentiality...

ROS-20260825-73-0001

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the `parse_durable_handle_context()` function in the `fs/smb/server/smb2pdu.c` file of the Smb kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the parsedurablehandlecontext function in the fs/smb/server/smb2pdu.c file of the Smb kernel of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the smb_direct_post_send_data() function in the fs/smb/server/transport_rdma.c file of the Smb kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smbdirectpostsenddata function in the fs/smb/server/transportrdma.c file of the Smb kernel of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb/server: The function ksmbdsessionrpcclose is called on the error path in the createsmb2pipe function. When the ksmbdiovpinrsp function fails, we should call ksmbdsessionrpcclose...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: smb/server: Avoid deadlock when linking with “ReplaceIfExists”. If the smb2createlink function is called with “ReplaceIfExists” set, and the file name actually exists, a deadlock will occur. The function ksmbdvfskernpathlocked wi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fixed a reference count leak when an invalid session is found during session lookup. When a session is found, but its state is not SMB2SESSIONVALID, it indicates that no valid session was found. However, the reference coun...

The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...