Lucene search
+L

10 matches found

OSV
OSV
added 2026/05/28 10:16 a.m.10 views

UBUNTU-CVE-2026-46155

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2compoundop If a server sends a truncated response but a large OutputBufferLength, and terminates the EA list early, checkwsleas returns success without validating that the entire...

9.1CVSS5.7AI score0.00478EPSS
SaveExploits0References14
OSV
OSV
added 2026/05/28 9:36 a.m.9 views

CVE-2026-46155 smb/client: fix out-of-bounds read in smb2_compound_op()

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2compoundop If a server sends a truncated response but a large OutputBufferLength, and terminates the EA list early, checkwsleas returns success without validating that the entire...

9.1CVSS6.6AI score
SaveExploits0References8
NVD
NVD
added 2025/10/15 8:15 a.m.21 views

CVE-2025-39975

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2compoundop In smb2compoundop, the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling o...

9.8CVSS0.00432EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/15 7:55 a.m.39 views

CVE-2025-39975

Concrete details available: The CVE-2025-39975 issue affects the Linux kernel SMB client, specifically smb2_compound_op() in fs/smb/client/smb2inode.c. The bug arises from incorrect indexing when processing each command’s response, causing improper handling of command results and, in some cases, ...

9.8CVSS6.3AI score0.00432EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-39819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in smb2compoundop. Such inconsistent update could lead to...

5.5CVSS6.4AI score0.00137EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/09/16 11:23 p.m.12 views

SUSE CVE-2025-39819

In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in smb2compoundop. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug: 1. In the comment secti...

5.5CVSS6.6AI score0.00137EPSS
SaveExploits0References22
Cvelist
Cvelist
added 2025/09/16 1:0 p.m.24 views

CVE-2025-39819 fs/smb: Fix inconsistent refcnt update

In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in smb2compoundop. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug: 1. In the comment secti...

0.00137EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/09/16 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an inconsistent reference count update in the smb2compoundop function, which could lead to a resource leak...

5.5CVSS8.1AI score0.00137EPSS
SaveExploits0References6
OSV
OSV
added 2024/09/18 8:15 a.m.3 views

DEBIAN-CVE-2024-46796

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

7.8CVSS5.9AI score0.00443EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/18 8:15 a.m.9 views

UBUNTU-CVE-2024-46796

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

9.8CVSS6.5AI score0.00443EPSS
SaveExploits0References6
Rows per page
Query Builder