Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called…Check if you run itEPSS 0.35%May 6, 2026
- High8.3In the Linux kernel, the following vulnerability has been resolved: ksmbd: require minimum ACE size in smb_check_perm_dacl() Both ACE-walk loops in smb_check_perm_dacl…Check if you run itEPSS 0.32%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifs_mount_get_tcon() with SMB1 UNI…Check if you run itEPSS 0.14%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to…Check if you run itEPSS 0.26%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() trusts the on…Check if you run itEPSS 0.63%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to sign…Check if you run itEPSS 0.18%Apr 30, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option Customer reported that some of their krb5 mounts w…Check if you run itEPSS 0.18%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled, c…Check if you run itEPSS 0.13%Mar 25, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have closes that race with…Check if you run itEPSS 0.56%Dec 30, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed There is a null-ptr-d…Check if you run itEPSS 0.60%Dec 30, 2025
- Critical9.8cifs: fix potential race when tree connecting ipcCheck if you run itEPSS 0.52%Dec 30, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon() When having a multiuser mount with domain= sp…Check if you run itEPSS 0.21%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: cifs: fix memory leak in smb3_fs_context_parse_param error path Add proper cleanup of ctx->source a…Check if you run itEPSS 0.20%Dec 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting sess…Check if you run itEPSS 0.51%Dec 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound When smb2_query_info_compound() ret…Check if you run itEPSS 0.42%Dec 8, 2025
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: cifs: parse_dfs_referrals: prevent oob on malformed input Malicious SMB server can send invalid rep…Check if you run itEPSS 0.41%Oct 30, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) In smbd_destr…Check if you run itEPSS 0.29%Oct 4, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab…Check if you run itEPSS 0.32%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_brea…Check if you run itEPSS 0.43%Aug 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all_cached_dirs() can't moCheck if you run itEPSS 0.20%Jul 10, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when reconnecting channels Fix cifs_signal_cifsd_for_reconnect() to take theCheck if you run itEPSS 0.25%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() This fixes the following problem: [ 749.901015Check this weekEPSS 19.00%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory leak on the deferred close xfstests on smb21 report kmemleak as below: unreferenced object 0xffCheck this weekEPSS 19.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cifs: fix small mempool leak in SMB2_negotiate() In some cases of failure (dialect mismatches) in SMB2_negotiateCheck this weekEPSS 18.00%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition in the readdir concurrency processCheck this weekEPSS 20.00%Jun 18, 2025