https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:43:45 +0000 https://vulnerability.circl.lu/vuln/cve-2026-64257 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>smb: client: reject overlapping data areas in SMB2 responses</p> <p>Commit 53b7c271f06b (&#34;smb: client: restrict implied bcc[0] exemption to responses without data area&#34;) restricted the implied bcc[0] length exception to responses without a data area. However, the overlap handling in __smb2_calc_size() clears data_length, which can make an invalid response appear to have no data area and so qualify for the exception.</p> <p>Track data area overlap separately and reject such responses before applying the length compatibility exceptions.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>smb: client: reject overlapping data areas in SMB2 responses</p> <p>Commit 53b7c271f06b (&#34;smb: client: restrict implied bcc[0] exemption to responses without data area&#34;) restricted the implied bcc[0] length exception to responses without a data area. However, the overlap handling in __smb2_calc_size() clears data_length, which can make an invalid response appear to have no data area and so qualify for the exception.</p> <p>Track data area overlap separately and reject such responses before applying the length compatibility exceptions.</p> https://vulnerability.circl.lu/vuln/cve-2026-64257