847 matches found
kernel: smb/client: fix memory leak in smb2_open_file()
A memory leak flaw was found in the Linux kernel's CIFS/SMB client. In the smb2openfile function, request buffers are not properly freed when performing direct I/O writes to a read-only SMB share. This causes slab cache objects to remain allocated, which can prevent the cifs module from unloading...
The vulnerability of the smb2_set_ea() function in the fs/smb/client/smb2ops.c module allows a hacker to cause a service failure in the Linux operating system’s SMB kernel client.
The vulnerability of the smb2setea function in the fs/smb/client/smb2ops.c module, which is part of the SMB client support in Linux kernel, relates to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux - уязвимость в linux-5.10, linux-5.15, linux-6.1
A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose...
kernel: Linux kernel: Denial of Service via resource leak in SMB2 compound operations
A flaw was found in the Linux kernel. An inconsistent update of the reference count in the smb2compoundop function, particularly during memory allocation failures, could lead to resource leaks. A local attacker could exploit this to cause a Denial of Service DoS by exhausting system resources...
Siemens SIMATIC Devices Out-of-bounds Write (CVE-2024-50151)
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...
CVE-2025-39975
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2compoundop In smb2compoundop, the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling o...
CVE-2025-39975
Concrete details available: The CVE-2025-39975 issue affects the Linux kernel SMB client, specifically smb2_compound_op() in fs/smb/client/smb2inode.c. The bug arises from incorrect indexing when processing each command’s response, causing improper handling of command results and, in some cases, ...
VulnCheck KEV: CVE-2025-37899
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess-user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for...
EUVD-2009-4345
Malware in sbrugna...
EUVD-2016-3222
Malware in sbrugna...
EUVD-2017-3873
Malware in sbrugna...
EUVD-2025-29941
Malicious code in bioql PyPI...
EUVD-2025-13043
Malicious code in bioql PyPI...
EUVD-2023-44015
Malicious code in bioql PyPI...
EUVD-2025-11252
Malicious code in bioql PyPI...
EUVD-2024-46494
Malicious code in bioql PyPI...
EUVD-2024-46504
Malicious code in bioql PyPI...
EUVD-2022-50675
Malicious code in bioql PyPI...