Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: server: fix active_num_conn leak on transport allocation failure Commit 77ffbcac4e56 ("smb: se…Check if you run itEPSS 0.55%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifs_mount_get_tcon() with SMB1 UNI…Check if you run itEPSS 0.14%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to…Check if you run itEPSS 0.26%May 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path smb2_ioctl_query_info() has two…Check if you run itEPSS 0.35%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expected messa…Check if you run itEPSS 0.17%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() trusts the on…Check if you run itEPSS 0.63%May 1, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte alignment…Check if you run itEPSS 0.40%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: use check_add_overflow() to prevent u16 DACL size overflow set_posix_acl_entries_dacl() and…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.14%Apr 30, 2026
- Medium5.5SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.16%Apr 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: i2c: s3c24xx: check the size of the SMBUS message before using it The first byte of an i2c SMBUS me…Check if you run itEPSS 0.18%Apr 24, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea + nlen + 1…Check if you run itEPSS 0.17%Apr 24, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_STOPPED_ON_S…Check if you run itEPSS 0.39%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength from the cli…Check if you run itEPSS 0.58%Apr 24, 2026
- High8.6In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading sub_auth[2] parse_dacl() compares each ACE SID agai…Check if you run itEPSS 0.54%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER decoder c…Check if you run itEPSS 0.14%Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() smbd_send_batch…Check if you run itEPSS 0.67%Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_di…Check if you run itEPSS 0.67%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available The logic off managing recv cr…Check if you run itEPSS 0.43%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv cre…Check if you run itEPSS 0.61%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.send_io.bcredits It turns out that our code will corrupt…Check if you run itEPSS 0.16%Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch p…Check if you run itEPSS 0.65%Apr 24, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv cre…Check if you run itEPSS 0.11%Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After this commit…Check if you run itEPSS 0.74%Apr 22, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leaks and NULL deref in smb2_lock() smb2_lock() has three error handling issues a…Check if you run itEPSS 0.68%Apr 22, 2026