https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 13:12:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01629 bdu:2024-01629 https://cve.radiocsirt.org/vuln/bdu:2024-01629 https://cve.radiocsirt.org/vuln/bell-cve-2023-52442 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-52442 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0301 certfr-2024-avi-0301 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0301 https://cve.radiocsirt.org/vuln/euvd-2026-344990 EUVD-2026-344990 https://cve.radiocsirt.org/vuln/euvd-2026-344990 https://cve.radiocsirt.org/vuln/fkie_cve-2023-52442 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: validate session id and tree id in compound request</p> <p>`smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compound request. if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbd_req_buf_next() to get current command in compound.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: validate session id and tree id in compound request</p> <p>`smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compound request. if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbd_req_buf_next() to get current command in compound.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-52442 https://cve.radiocsirt.org/vuln/ghsa-5wjx-fx3x-22c6 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: validate session id and tree id in compound request</p> <p>`smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compound request. if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbd_req_buf_next() to get current command in compound.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: validate session id and tree id in compound request</p> <p>`smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compound request. if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbd_req_buf_next() to get current command in compound.</p> https://cve.radiocsirt.org/vuln/ghsa-5wjx-fx3x-22c6 https://cve.radiocsirt.org/vuln/gsd-2023-52442 gsd-2023-52442 https://cve.radiocsirt.org/vuln/gsd-2023-52442 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52442 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 58 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in compound request `smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compound request. if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbd_req_buf_next() to get current command in compound.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 58 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in compound request `smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compound request. if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbd_req_buf_next() to get current command in compound.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52442 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0431 <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0431