744 matches found
kernel: smb/client: fix memory leak in smb2_open_file()
A memory leak flaw was found in the Linux kernel's CIFS/SMB client. In the smb2openfile function, request buffers are not properly freed when performing direct I/O writes to a read-only SMB share. This causes slab cache objects to remain allocated, which can prevent the cifs module from unloading...
Astra Linux - уязвимость в linux-5.10, linux-5.15, linux-6.1
A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose...
kernel: Linux kernel: Denial of Service via resource leak in SMB2 compound operations
A flaw was found in the Linux kernel. An inconsistent update of the reference count in the smb2compoundop function, particularly during memory allocation failures, could lead to resource leaks. A local attacker could exploit this to cause a Denial of Service DoS by exhausting system resources...
Siemens SIMATIC Devices Out-of-bounds Write (CVE-2024-50151)
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...
CVE-2025-39975
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2compoundop In smb2compoundop, the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling o...
CVE-2025-39975
CVE-2025-39975 affects the Linux kernel smb client code path: smb2_compound_op() uses incorrect indices when processing each command’s response, causing improper handling of command results. If the computed index reaches MAX_COMPOUND, this can trigger out-of-bounds accesses. The issue is resolved...
VulnCheck KEV: CVE-2025-37899
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess-user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for...
EUVD-2009-4345
Malware in sbrugna...
EUVD-2017-3873
Malware in sbrugna...
EUVD-2016-3222
Malware in sbrugna...
EUVD-2024-46506
Malicious code in bioql PyPI...
EUVD-2022-15376
Malicious code in bioql PyPI...
EUVD-2025-13043
Malicious code in bioql PyPI...
EUVD-2025-29941
Malicious code in bioql PyPI...
EUVD-2024-46505
Malicious code in bioql PyPI...
EUVD-2023-36514
Malicious code in bioql PyPI...
EUVD-2024-46494
Malicious code in bioql PyPI...
EUVD-2025-11252
Malicious code in bioql PyPI...