8978 matches found
CVE-2026-64597
A flaw was found in the Linux kernel's Server Message Block SMB client. A vulnerability exists in the SMB2close replay mechanism where a response buffer can be freed twice. This double-free condition can lead to memory corruption, potentially resulting in a denial of service or the execution of...
The vulnerability of the smb/server/smb2pdu.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2026-68431
The CVE-2026-68431 entry documents a Linux kernel ksmbd flaw where SMB2 transform requests bypass minimum PDU size validation, allowing an unauthenticated remote attacker on SMB2.1 to trigger reads beyond the request allocation and potentially disclose data. The issue arises because the transform...
RHEL 8 : kernel (RHSA-2026:53989)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53989 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen/privcmd: fix double free...
RHEL 9 : kernel (RHSA-2026:53990)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53990 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs/smb/client: fix...
SUSE CVE-2026-68343
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response contains the fixed referral entry array and, on for-next, the per-referral string offsets. However, the response also contains a...
CVE-2026-68099
A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An integer overflow vulnerability exists when processing Access Control Lists ACLs. This flaw can lead to a malformed ACL, which, when re-parsed by clients or ksmbd itself, may trigger out-of-bounds reads. Thi...
CVE-2026-68343
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote attacker could send a specially crafted SMB response containing a malformed Distributed File System DFS referral. This could cause the PathConsumed value to exceed the search name length, leading to an out-of-bounds...
CVE-2026-65794
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-62799
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-62800
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
CVE-2026-62790
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
CVE-2026-62782
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-65794
CVE-2026-65794 is a buffer over-read in the Windows SMB Client that allows an unauthenticated attacker to disclose information over the network. The CVSS v3.1 base score is 6.5 (Medium) with a network attack vector, low attack complexity, no privileges required, and user interaction required; imp...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...
EUVD-2026-56740
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...