Количество 15
Количество 15
GHSA-24h4-22f3-65qc
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.
CVE-2026-43112
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.
CVE-2026-43112
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.
CVE-2026-43112
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.
CVE-2026-43112
In the Linux kernel, the following vulnerability has been resolved: f ...
RLSA-2026:36366
Important: kernel security update
ELSA-2026-36366
ELSA-2026-36366: kernel security update (IMPORTANT)
ELSA-2026-34911
ELSA-2026-34911: kernel security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:36018
Important: kernel security, bug fix, and enhancement update
ELSA-2026-36018
ELSA-2026-36018: kernel security, bug fix, and enhancement update (IMPORTANT)
openSUSE-SU-2026:20912-1
Security update for the Linux Kernel
SUSE-SU-2026:2914-1
Security update for the Linux Kernel
SUSE-SU-2026:2722-1
Security update for the Linux Kernel
SUSE-SU-2026:2799-1
Security update for the Linux Kernel
ELSA-2026-50372
ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-24h4-22f3-65qc In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-43112 In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-43112 In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs. | CVSS3: 8.1 | 0% Низкий | 4 месяца назад |
 | CVE-2026-43112 In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
| CVE-2026-43112 In the Linux kernel, the following vulnerability has been resolved: f ... | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | RLSA-2026:36366 Important: kernel security update | 0% Низкий | 2 месяца назад | |
| ELSA-2026-36366 ELSA-2026-36366: kernel security update (IMPORTANT) | 0% Низкий | 2 месяца назад | |
| ELSA-2026-34911 ELSA-2026-34911: kernel security, bug fix, and enhancement update (IMPORTANT) | около 1 месяца назад | ||
| RLSA-2026:36018 Important: kernel security, bug fix, and enhancement update | 2 месяца назад | ||
| ELSA-2026-36018 ELSA-2026-36018: kernel security, bug fix, and enhancement update (IMPORTANT) | 2 месяца назад | ||
 | openSUSE-SU-2026:20912-1 Security update for the Linux Kernel | 3 месяца назад | ||
| SUSE-SU-2026:2914-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| SUSE-SU-2026:2722-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:2799-1 Security update for the Linux Kernel | 2 месяца назад | ||
| ELSA-2026-50372 ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 2 месяца назад |
Уязвимостей на страницу