All CVEs — page 304 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Linux kernel's SMB client has a use-after-free vulnerability where the reconnect work item is not properly canceled during cleanup, potentially leading to memory corruption when the demultiplex thread exits while reconnect work is still queued. This flaw can be triggered by network disconnections and reconnections in SMB sessions.
The Linux kernel's SMB client has a race condition and list initialization bug that can cause memory corruption and potential denial of service. This flaw occurs when processing SMB server connections and can lead to double-insertion of list nodes, corrupting internal data structures.
The Linux kernel's SMB client contains a use-after-free vulnerability in cifs_try_adding_channels() where a freed network interface structure is accessed after a concurrent interface refresh operation. This occurs when the function iterates through interface lists without maintaining proper reference counts across an unlocked window, potentially leading to memory corruption and system instability.
The flaw involves improper bounds checking and pointer lifecycle management in the handling of compound encrypted frames, which could lead to use-after-free and other security issues.