https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 09:13:56 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-98261 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-98261 https://cve.radiocsirt.org/vuln/euvd-2026-383373 EUVD-2026-383373 https://cve.radiocsirt.org/vuln/euvd-2026-383373 https://cve.radiocsirt.org/vuln/fkie_cve-2026-98261 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cifs: Fix server use-after-free in cifs_chan_skip_or_disable()</p> <p>When a secondary channel is no longer supported by the server, cifs_chan_skip_or_disable() drops the channel reference with cifs_put_tcp_session() and then continues to use the server pointer by calling cifs_signal_cifsd_for_reconnect() on it and reading its primary_server pointer. cifs_put_tcp_session() can drop the last reference of the channel and tear it down, so both the channel and the primary server (whose reference is also dropped by cifs_put_tcp_session()) can be freed before they are signaled for reconnect.</p> <p>Signal the channel and the primary server and capture the primary server pointer before dropping the channel reference with cifs_put_tcp_session().</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cifs: Fix server use-after-free in cifs_chan_skip_or_disable()</p> <p>When a secondary channel is no longer supported by the server, cifs_chan_skip_or_disable() drops the channel reference with cifs_put_tcp_session() and then continues to use the server pointer by calling cifs_signal_cifsd_for_reconnect() on it and reading its primary_server pointer. cifs_put_tcp_session() can drop the last reference of the channel and tear it down, so both the channel and the primary server (whose reference is also dropped by cifs_put_tcp_session()) can be freed before they are signaled for reconnect.</p> <p>Signal the channel and the primary server and capture the primary server pointer before dropping the channel reference with cifs_put_tcp_session().</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-98261 https://cve.radiocsirt.org/vuln/ghsa-mfc9-mfpp-wwcf <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cifs: Fix server use-after-free in cifs_chan_skip_or_disable()</p> <p>When a secondary channel is no longer supported by the server, cifs_chan_skip_or_disable() drops the channel reference with cifs_put_tcp_session() and then continues to use the server pointer by calling cifs_signal_cifsd_for_reconnect() on it and reading its primary_server pointer. cifs_put_tcp_session() can drop the last reference of the channel and tear it down, so both the channel and the primary server (whose reference is also dropped by cifs_put_tcp_session()) can be freed before they are signaled for reconnect.</p> <p>Signal the channel and the primary server and capture the primary server pointer before dropping the channel reference with cifs_put_tcp_session().</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cifs: Fix server use-after-free in cifs_chan_skip_or_disable()</p> <p>When a secondary channel is no longer supported by the server, cifs_chan_skip_or_disable() drops the channel reference with cifs_put_tcp_session() and then continues to use the server pointer by calling cifs_signal_cifsd_for_reconnect() on it and reading its primary_server pointer. cifs_put_tcp_session() can drop the last reference of the channel and tear it down, so both the channel and the primary server (whose reference is also dropped by cifs_put_tcp_session()) can be freed before they are signaled for reconnect.</p> <p>Signal the channel and the primary server and capture the primary server pointer before dropping the channel reference with cifs_put_tcp_session().</p> https://cve.radiocsirt.org/vuln/ghsa-mfc9-mfpp-wwcf https://cve.radiocsirt.org/vuln/msrc_cve-2026-98261 msrc_CVE-2026-98261 https://cve.radiocsirt.org/vuln/msrc_cve-2026-98261 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-98261 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 159 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() When a secondary channel is no longer supported by the server, cifs_chan_skip_or_disable() drops the channel reference with cifs_put_tcp_session() and then continues to use the server pointer by calling cifs_signal_cifsd_for_reconnect() on it and reading its primary_server pointer. cifs_put_tcp_session() can drop the last reference of the channel and tear it down, so both the channel and the primary server (whose reference is also dropped by cifs_put_tcp_session()) can be freed before they are signaled for reconnect. Signal the channel and the primary server and capture the primary server pointer before dropping the channel reference with cifs_put_tcp_session().</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 159 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() When a secondary channel is no longer supported by the server, cifs_chan_skip_or_disable() drops the channel reference with cifs_put_tcp_session() and then continues to use the server pointer by calling cifs_signal_cifsd_for_reconnect() on it and reading its primary_server pointer. cifs_put_tcp_session() can drop the last reference of the channel and tear it down, so both the channel and the primary server (whose reference is also dropped by cifs_put_tcp_session()) can be freed before they are signaled for reconnect. Signal the channel and the primary server and capture the primary server pointer before dropping the channel reference with cifs_put_tcp_session().</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-98261