Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
#Kernel_Security Linux File System Basics Part 1 https://u1f383.github.io/linux/2026/02/26/filesystem-101.html // Overview and CVE-2022-0185 / CVE-2023-5345 Part 2 https://u1f383.github.io/linux/2026/03/04/filesystem-102.html // Isolation, Permission Model and CVE-2023-0386
Post summary
The post references Linux filesystem basics and lists three CVE identifiers but lacks detail on exploitation, patches, or technical aspects.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | fedoraproject | fedora | 37 | - | - |
| OS | fedoraproject | fedora | 38 | - | - |
| OS | fedoraproject | fedora | 39 | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 6.6 | - | - |
| OS | linux | linux_kernel | 6.6 | - | - |
| OS | linux | linux_kernel | 6.6 | - | - |