CVE-2026-90152 smb/server: fix session leak in ksmbd_session_register()

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbdsessionregister See the procedure below: smb2sesssetup ksmbdsmb2sessioncreate sessioncreate atomicset&sess-refcnt, 2 hashaddsessionstable, &sess-hlist, sess-id ksmbdsessionregister...

PT-2026-94511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb/server component where the module init function fails to call ksmbd proc cleanup during a module initialization failure. When a subsequent initializer fails, t...

CVE-2026-90164: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup fails ksmbdserverinit calls ksmbdprocinit before creating the remaining proc entries and server subsystems. ksmbdprocinit tears down partial state on a procfs or percpucounter...

CVE-2026-90163: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...

CVE-2026-90152: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbdsessionregister See the procedure below: smb2sesssetup ksmbdsmb2sessioncreate sessioncreate atomicset&sess-refcnt, 2 hashaddsessionstable, &sess-hlist, sess-id ksmbdsessionregister...

PT-2026-94523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SMB server component of the Linux kernel. The issue arises when the buffer returned by the ksmbd ipc login request ext function is not properly freed after...

CVE-2026-90166: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in ksmbdipctreeconnectrequest See the procedure below: ksmbdtreeconnconnect ksmbdshareconfigget share-name = kstrdup // fail if !testshareconfigflagshare, KSMBDSHAREFLAGPIPE // false // do not check...

CVE-2026-90165: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix invalid pointer dereference in ksmbdstopdurablescavenger See the procedure below: ksmbdlaunchksmbddurablescavenger durablescavengerrunning = true serverconf.dhtask = kthreadrun // fail, dhtask is an ERRPTR...

CVE-2026-84543

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84543

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84515

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to kernel memory corruption...

CVE-2026-84515

Apple has addressed an out-of-bounds write vulnerability in macOS affecting versions prior to Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 . The root cause involves insufficient bounds checking, which could allow an attacker connecting to a malicious SMB server to trigger kernel memory corrupti...

EUVD-2026-77884

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

CVE-2026-84509

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

CVE-2026-84536

An integer underflow vulnerability exists in macOS that can be triggered by connecting to a malicious SMB server . This flaw allows for unexpected system termination (denial-of-service). The issue has been addressed with improved input validation and is fixed in macOS Golden Gate 27 , macOS Sequo...

CVE-2026-84536

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: Server: Fixed a leak of activenumconn in ksmbdtcpnewconnection. When ksmbdtcpnewconnection fails due to a kthreadrun failure, the transport is freed using freetransport, which does not decrement activenumconn, resulting in a...

CVE-2026-84509: Out-of-bounds Read

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

PT-2026-91603

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 macOS versions prior to Sequoia 15.8 macOS versions prior to Tahoe 26.7 Description An out-of-bounds access issue occurs when connecting to a malicious SMB server, which may lead to unexpected system...

CVE-2026-84536: Integer Overflow or Wraparound

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...