Two critical Linux KSMBD vulnerabilities have been disclosed. Learn how KSMBD differs from Samba, how to assess exposure, and what mitigations to consider.
#hackernews #news
Two critical Linux KSMBD vulnerabilities have been disclosed. Learn how KSMBD differs from Samba, how to assess exposure, and what mitigations to consider.
#hackernews #news
The ksmbd component in several Canonical Linux kernel packages could let an attacker infer secret information by measuring response times. This risk is fixed by using a…
Too many irrelevant or confusing CVEs? Use stackflag.com
#linux #canonical #Ubuntu1804LTS #CVE #infosec
The ksmbd component in several Canonical Linux kernel packages could let an attacker infer secret information by measuring response times. This risk is fixed by using a…
Too many irrelevant or confusing CVEs? Use stackflag.com
#linux #canonical #Ubuntu1804LTS #CVE #infosec
1. Have a Linux kernel with vulnerable version ksmbd installed
2. Have an RDMA storage device physically installed
3. Create a direct-attach SMB share via ksmbd with the 'rdma' option pointing to the storage device
1. Have a Linux kernel with vulnerable version ksmbd installed
2. Have an RDMA storage device physically installed
3. Create a direct-attach SMB share via ksmbd with the 'rdma' option pointing to the storage device
📊 3.7/10
📝 A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36508
#cybersecurity #infosec #cve #euvd
📊 3.7/10
📝 A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36508
#cybersecurity #infosec #cve #euvd
📊 5.9/10
📝 A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36510
#cybersecurity #infosec #cve #euvd
📊 5.9/10
📝 A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36510
#cybersecurity #infosec #cve #euvd
📊 5.3/10
📝 A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, pot...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36512
#cybersecurity #infosec #cve #euvd
📊 5.3/10
📝 A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, pot...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36512
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: hold a connection reference for each session channel
ksmbd_session_unregister() ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119285
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: hold a connection reference for each session channel
ksmbd_session_unregister() ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119285
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: drain session procfs readers before dropping table references
Session registrati...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119282
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: drain session procfs readers before dropping table references
Session registrati...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119282
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: limit sessions on each connection
The pending setup limit only counts InProgress...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119284
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: limit sessions on each connection
The pending setup limit only counts InProgress...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119284
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: defer connection scavenging while session locks are busy
The expiration worker h...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119286
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: defer connection scavenging while session locks are busy
The expiration worker h...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119286
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reserve space for the UTF-16 terminator in stream info
smb_strtoUTF16() always w...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119289
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reserve space for the UTF-16 terminator in stream info
smb_strtoUTF16() always w...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119289
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reclaim ended sessions on logoff and expiration
LOGOFF and previous-session repl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119283
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reclaim ended sessions on logoff and expiration
LOGOFF and previous-session repl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119283
#cybersecurity #infosec #cve #euvd
📊 7.5/10
📝 A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36513
#cybersecurity #infosec #cve #euvd
📊 7.5/10
📝 A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36513
#cybersecurity #infosec #cve #euvd
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
📰 Source: Phoronix
🔗 Link: https://www.phoronix.com/news/Linux-7.4-KSMBD
#linux #opensource
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
📰 Source: Phoronix
🔗 Link: https://www.phoronix.com/news/Linux-7.4-KSMBD
#linux #opensource
Via Brodie Robertson
#Linux #cybersecurity
✍️ Gloria
Via Brodie Robertson
#Linux #cybersecurity
✍️ Gloria
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
📰 Source: Phoronix
🔗 Link: https://www.phoronix.com/news/Linux-7.4-KSMBD
#linux #opensource
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
📰 Source: Phoronix
🔗 Link: https://www.phoronix.com/news/Linux-7.4-KSMBD
#linux #opensource
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
smb2_get_info_filesy...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112014
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
smb2_get_info_filesy...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112014
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
smb2_get_info_filesystem() rep...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112015
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
smb2_get_info_filesystem() rep...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112015
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
smb2_get_info_file...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112013
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Linux
📝 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
smb2_get_info_file...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112013
#cybersecurity #infosec #cve #euvd