Lucene search
+L

26 matches found

SUSE CVE
SUSE CVE
•added 2026/09/25 11:46 p.m.•19 views

SUSE CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References2
osv-debian
osv-debian
•added 2026/09/25 11:17 a.m.•11 views

DEBIAN-CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS6.1AI score0.00269EPSS
SaveExploits0References1
osv-azl
osv-azl
•added 2026/09/25 11:17 a.m.•15 views

AZL-104675 CVE-2026-98115 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•13 views

CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS0.00269EPSS
SaveExploits0References2
osv-ubuntu
osv-ubuntu
•added 2026/09/25 11:17 a.m.•17 views

UBUNTU-CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS6.1AI score0.00269EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 10:36 a.m.•47 views

CVE-2026-98115

The Linux kernel contains a vulnerability in ksmbd regarding the handling of SMB3 multichannel requests. The issue arises because shared session objects may be freed before all bound channels are processed. Additionally, a deferred byte-range lock can remain counted as a running request, waking o...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/09/25 10:36 a.m.•20 views

EUVD-2026-86946

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2026/09/25 10:36 a.m.•20 views

CVE-2026-98115 ksmbd: safely drain sessions during logoff

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/25 10:36 a.m.•49 views

CVE-2026-98115 ksmbd: safely drain sessions during logoff

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS0.00269EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/09/25 12:00 a.m.•15 views

CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•13 views

CVE-2026-98115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-98115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a...

8.8CVSS5.8AI score0.00269EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•6 views

PT-2026-98777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where sessions are not safely drained during logoff. In SMB3 multichannel, requests for a single session can operate across multiple connections. The...

9.8CVSS5.8AI score0.00511EPSS
SaveExploits0References406
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•12 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Use memcmp to compare ClientGUIDs. ClientGUID is a fixed-size binary value that can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, causing different ClientGUID values to be incorrectly treated a...

9.1CVSS5.9AI score0.00406EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/08/15 11:51 p.m.•22 views

SUSE CVE-2026-74521

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equa...

9.1CVSS6.9AI score0.00406EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/15 1:17 p.m.•16 views

CVE-2026-74521

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equa...

9.1CVSS0.00406EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/15 1:17 p.m.•15 views

CVE-2026-74521

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equa...

9.1CVSS6.9AI score0.00406EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/15 12:27 p.m.•69 views

CVE-2026-74521

The CVE-2026-74521 vulnerability affects the Linux kernel’s ksmbd component, where ClientGUIDs were compared with strncmp() and could misclassify distinct GUIDs that contain embedded NUL bytes. The fix uses memcmp() to compare all SMB2_CLIENT_GUID_SIZE bytes in SMB3 multichannel session binding a...

9.1CVSS6.9AI score0.00406EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/15 12:00 a.m.•6 views

CVE-2026-74521: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equa...

9.1CVSS6.9AI score0.00406EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/25 10:17 a.m.•25 views

CVE-2026-64390

In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2LOCK adds each granted byte-range lock to both the file lock list and the lock list of the connection which handled the request. The final close and durable handle paths,...

8.8CVSS5.9AI score0.00467EPSS
SaveExploits0References27
Rows per page
Query Builder