Количество 19
Количество 19
GHSA-j3g4-c7cw-5ch7
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests.
CVE-2026-64383
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests.
CVE-2026-64383
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests.
CVE-2026-64383
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests.
CVE-2026-64383
smb: client: fix double-free in SMB2_flush() replay
CVE-2026-64383
In the Linux kernel, the following vulnerability has been resolved: s ...
ROS-20261008-80-0263
Уязвимость kernel-lt
ELSA-2026-71233
ELSA-2026-71233: kernel security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-71232
ELSA-2026-71232: kernel security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:71232
Important: kernel security, bug fix, and enhancement update
SUSE-SU-2026:4369-1
Security update for the Linux Kernel
ALT-PU-2026-12325
ALT-PU-2026-12325: package `kernel-image-for-vm` update to version 6.18.40-alt1
ALT-PU-2026-11249
ALT-PU-2026-11249: package `kernel-image-6.12` update to version 6.12.96-alt1
ALT-PU-2026-11606
ALT-PU-2026-11606: package `kernel-image-6.18` update to version 6.18.40-alt1
SUSE-SU-2026:4254-1
Security update for the Linux Kernel
SUSE-SU-2026:4120-1
Security update for the Linux Kernel
openSUSE-SU-2026:21910-1
Security update for the Linux Kernel
ELSA-2026-500248
ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2026-11671
ALT-PU-2026-11671: package `kernel-image-rt` update to version 6.12.98-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-j3g4-c7cw-5ch7 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-64383 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-64383 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests. | CVSS3: 6.4 | 0% Низкий | 3 месяца назад |
 | CVE-2026-64383 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-64383 smb: client: fix double-free in SMB2_flush() replay | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-64383 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
 | ROS-20261008-80-0263 Уязвимость kernel-lt | CVSS3: 9.8 | 0% Низкий | 5 дней назад |
| ELSA-2026-71233 ELSA-2026-71233: kernel security, bug fix, and enhancement update (IMPORTANT) | 11 дней назад | ||
| ELSA-2026-71232 ELSA-2026-71232: kernel security, bug fix, and enhancement update (IMPORTANT) | 19 дней назад | ||
 | RLSA-2026:71232 Important: kernel security, bug fix, and enhancement update | 17 дней назад | ||
 | SUSE-SU-2026:4369-1 Security update for the Linux Kernel | 15 дней назад | ||
| ALT-PU-2026-12325 ALT-PU-2026-12325: package `kernel-image-for-vm` update to version 6.18.40-alt1 | CVSS3: 9.8 | 2 месяца назад | |
| ALT-PU-2026-11249 ALT-PU-2026-11249: package `kernel-image-6.12` update to version 6.12.96-alt1 | CVSS3: 10 | 3 месяца назад | |
| ALT-PU-2026-11606 ALT-PU-2026-11606: package `kernel-image-6.18` update to version 6.18.40-alt1 | CVSS3: 10 | 2 месяца назад | |
| SUSE-SU-2026:4254-1 Security update for the Linux Kernel | 26 дней назад | ||
| SUSE-SU-2026:4120-1 Security update for the Linux Kernel | около 1 месяца назад | ||
| openSUSE-SU-2026:21910-1 Security update for the Linux Kernel | 21 день назад | ||
| ELSA-2026-500248 ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 месяца назад | ||
| ALT-PU-2026-11671 ALT-PU-2026-11671: package `kernel-image-rt` update to version 6.12.98-alt1 | CVSS3: 10 | 2 месяца назад |
Уязвимостей на страницу