Lucene search
+L

23 matches found

Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•3 views

PT-2026-93435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the smb2 read pipe function allocates only the payload size for compound response handling. Because the last response iov is extended to an...

5.7AI score0.00209EPSS
SaveExploits0References18
BDU FSTEC
BDU FSTEC
•added 2026/06/28 12:00 a.m.•21 views

Linux SMB Server Buffer Overflow DoS

The vulnerability of the smb2read function in the fs/smb/server/smb2pdu.c module of the SMB server component of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7.6AI score0.00186EPSS
SaveExploits0References13Affected Software4
Redos
Redos
•added 2026/01/13 12:00 a.m.•22 views

ROS-20260113-7373

A vulnerability in the smb2read function in the fs/smb/server/smb2pdu.c module of the Linux kernel is related to reading beyond buffer boundaries. Exploitation of the vulnerability may allow a remote intruder to affect confidentiality, integrity and availability of protected information...

7.5CVSS7.3AI score0.0111EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/12/08 12:22 a.m.•12 views

SUSE CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

5.7AI score0.00186EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/08 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-40286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree. CVE-2025-40286 Note that...

6.2AI score0.00186EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2025/12/06 10:15 p.m.•16 views

DEBIAN-CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

5.9AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/06 10:15 p.m.•18 views

CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

0.00186EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2025/12/06 10:15 p.m.•24 views

UBUNTU-CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

5.9AI score0.00186EPSS
SaveExploits0References23
attackerkb
attackerkb
•added 2025/12/06 9:51 p.m.•19 views

CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

5.7AI score0.00186EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/03 12:00 a.m.•24 views

Linux SMB2 Read Buffer Overflow DoS

The vulnerability of the smb2read function in the fs/smb/server/smb2pdu.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.5CVSS7.7AI score0.0111EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-42914

Malicious code in bioql PyPI...

7.5CVSS7.1AI score0.0111EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2023-39179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied dat...

7.5CVSS6.8AI score0.0111EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2024/11/18 10:15 a.m.•3 views

DEBIAN-CVE-2023-39179

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

7.5CVSS6.9AI score0.0111EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/18 10:15 a.m.•31 views

CVE-2023-39179

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

7.5CVSS6.2AI score
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2024/11/18 10:15 a.m.•15 views

UBUNTU-CVE-2023-39180

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

7.5CVSS5.5AI score0.01439EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/11/15 5:21 p.m.•20 views

CVE-2023-39179

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

7.5CVSS5.8AI score0.0111EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/09/14 2:51 a.m.•13 views

SUSE CVE-2024-46686

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2newreadreq This happens when called from SMB2read while using rdma and reaching the rdmareadwritethreshold...

5.5CVSS6.2AI score0.00231EPSS
SaveExploits0References17
osv_debian
osv_debian
•added 2024/09/13 6:15 a.m.•10 views

DEBIAN-CVE-2024-46686

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2newreadreq This happens when called from SMB2read while using rdma and reaching the rdmareadwritethreshold...

5.5CVSS5.7AI score0.00231EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/06/12 3:27 a.m.•12 views

SUSE CVE-2023-39180

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

7.5CVSS6.6AI score0.01439EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/23 12:00 a.m.•2 views

PT-2023-36482

Уязвимость функции smb2 read в модуле fs/smb/server/smb2pdu.c ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информаци...

7.5CVSS0.0111EPSS
SaveExploits0References4
Rows per page
Query Builder