Количество 58
Количество 58
GHSA-3mg7-pfmq-9qfv
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
smb: client: reject userspace cifs.spnego descriptions
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: s ...
ELSA-2026-23258
ELSA-2026-23258: kernel security update (IMPORTANT)
BDU:2026-07574
Уязвимость функции cifs_get_spnego_key() инструмента cifs.upcall пакета cifs-utils ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код
ROS-20260608-73-0001
Уязвимость kernel-lt
SUSE-SU-2026:3067-1
Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
ELSA-2026-24381
ELSA-2026-24381: kernel security update (IMPORTANT)
SUSE-SU-2026:3066-1
Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:3065-1
Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:3011-1
Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2995-1
Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2994-1
Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2992-1
Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2955-1
Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2909-1
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2421-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-3mg7-pfmq-9qfv In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-46243 smb: client: reject userspace cifs.spnego descriptions | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
| ELSA-2026-23258 ELSA-2026-23258: kernel security update (IMPORTANT) | около 2 месяцев назад | ||
 | BDU:2026-07574 Уязвимость функции cifs_get_spnego_key() инструмента cifs.upcall пакета cifs-utils ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код | CVSS3: 8.8 | 0% Низкий | 2 месяца назад |
 | ROS-20260608-73-0001 Уязвимость kernel-lt | CVSS3: 8.8 | 0% Низкий | около 2 месяцев назад |
 | SUSE-SU-2026:3067-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) | 11 дней назад | ||
| ELSA-2026-24381 ELSA-2026-24381: kernel security update (IMPORTANT) | 29 дней назад | ||
| SUSE-SU-2026:3066-1 Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) | 12 дней назад | ||
| SUSE-SU-2026:3065-1 Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5) | 12 дней назад | ||
| SUSE-SU-2026:3011-1 Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5) | 12 дней назад | ||
| SUSE-SU-2026:2995-1 Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5) | 13 дней назад | ||
| SUSE-SU-2026:2994-1 Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5) | 13 дней назад | ||
| SUSE-SU-2026:2992-1 Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5) | 13 дней назад | ||
| SUSE-SU-2026:2955-1 Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) | 13 дней назад | ||
| SUSE-SU-2026:2909-1 Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) | 14 дней назад | ||
| SUSE-SU-2026:2421-1 Security update for the Linux Kernel | около 1 месяца назад |
Уязвимостей на страницу