[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-23428":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":38,"related":39,"reserved_at":9,"published_at":40,"modified_at":41,"state":42,"summary":43,"references_raw":52,"kevs":83,"epss":84,"epss_history":87,"metrics":357,"affected":368},"CVE-2026-23428","In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix use-after-free of share_conf in compound request\n\nsmb2_get_ksmbd_tcon() reuses work->tcon in compound requests without\nvalidating tcon->t_state. ksmbd_tree_conn_lookup() checks t_state ==\nTREE_CONNECTED on the initial lookup path, but the compound reuse path\nbypasses this check entirely.\n\nIf a prior command in the compound (SMB2_TREE_DISCONNECT) sets t_state\nto TREE_DISCONNECTED and frees share_conf via ksmbd_share_config_put(),\nsubsequent commands dereference the freed share_conf through\nwork->tcon->share_conf.\n\nKASAN report:\n\n[    4.144653] ==================================================================\n[    4.145059] BUG: KASAN: slab-use-after-free in smb2_write+0xc74/0xe70\n[    4.145415] Read of size 4 at addr ffff88810430c194 by task kworker/1:1/44\n[    4.145772]\n[    4.145867] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted 7.0.0-rc3+ #60 PREEMPTLAZY\n[    4.145871] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[    4.145875] Workqueue: ksmbd-io handle_ksmbd_work\n[    4.145888] Call Trace:\n[    4.145892]  \u003CTASK>\n[    4.145894]  dump_stack_lvl+0x64/0x80\n[    4.145910]  print_report+0xce/0x660\n[    4.145919]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n[    4.145928]  ? smb2_write+0xc74/0xe70\n[    4.145931]  kasan_report+0xce/0x100\n[    4.145934]  ? smb2_write+0xc74/0xe70\n[    4.145937]  smb2_write+0xc74/0xe70\n[    4.145939]  ? __pfx_smb2_write+0x10/0x10\n[    4.145942]  ? _raw_spin_unlock+0xe/0x30\n[    4.145945]  ? ksmbd_smb2_check_message+0xeb2/0x24c0\n[    4.145948]  ? smb2_tree_disconnect+0x31c/0x480\n[    4.145951]  handle_ksmbd_work+0x40f/0x1080\n[    4.145953]  process_one_work+0x5fa/0xef0\n[    4.145962]  ? assign_work+0x122/0x3e0\n[    4.145964]  worker_thread+0x54b/0xf70\n[    4.145967]  ? __pfx_worker_thread+0x10/0x10\n[    4.145970]  kthread+0x346/0x470\n[    4.145976]  ? recalc_sigpending+0x19b/0x230\n[    4.145980]  ? __pfx_kthread+0x10/0x10\n[    4.145984]  ret_from_fork+0x4fb/0x6c0\n[    4.145992]  ? __pfx_ret_from_fork+0x10/0x10\n[    4.145995]  ? __switch_to+0x36c/0xbe0\n[    4.145999]  ? __pfx_kthread+0x10/0x10\n[    4.146003]  ret_from_fork_asm+0x1a/0x30\n[    4.146013]  \u003C/TASK>\n[    4.146014]\n[    4.149858] Allocated by task 44:\n[    4.149953]  kasan_save_stack+0x33/0x60\n[    4.150061]  kasan_save_track+0x14/0x30\n[    4.150169]  __kasan_kmalloc+0x8f/0xa0\n[    4.150274]  ksmbd_share_config_get+0x1dd/0xdd0\n[    4.150401]  ksmbd_tree_conn_connect+0x7e/0x600\n[    4.150529]  smb2_tree_connect+0x2e6/0x1000\n[    4.150645]  handle_ksmbd_work+0x40f/0x1080\n[    4.150761]  process_one_work+0x5fa/0xef0\n[    4.150873]  worker_thread+0x54b/0xf70\n[    4.150978]  kthread+0x346/0x470\n[    4.151071]  ret_from_fork+0x4fb/0x6c0\n[    4.151176]  ret_from_fork_asm+0x1a/0x30\n[    4.151286]\n[    4.151332] Freed by task 44:\n[    4.151418]  kasan_save_stack+0x33/0x60\n[    4.151526]  kasan_save_track+0x14/0x30\n[    4.151634]  kasan_save_free_info+0x3b/0x60\n[    4.151751]  __kasan_slab_free+0x43/0x70\n[    4.151861]  kfree+0x1ca/0x430\n[    4.151952]  __ksmbd_tree_conn_disconnect+0xc8/0x190\n[    4.152088]  smb2_tree_disconnect+0x1cd/0x480\n[    4.152211]  handle_ksmbd_work+0x40f/0x1080\n[    4.152326]  process_one_work+0x5fa/0xef0\n[    4.152438]  worker_thread+0x54b/0xf70\n[    4.152545]  kthread+0x346/0x470\n[    4.152638]  ret_from_fork+0x4fb/0x6c0\n[    4.152743]  ret_from_fork_asm+0x1a/0x30\n[    4.152853]\n[    4.152900] The buggy address belongs to the object at ffff88810430c180\n[    4.152900]  which belongs to the cache kmalloc-96 of size 96\n[    4.153226] The buggy address is located 20 bytes inside of\n[    4.153226]  freed 96-byte region [ffff88810430c180, ffff88810430c1e0)\n[    4.153549]\n[    4.153596] The buggy address belongs to the physical page:\n[    4.153750] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810430ce80 pfn:0x10430c\n[    4.154000] flags: 0x\n---truncated---",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36],{"_key":25},"DEBIAN-CVE-2026-23428",{"_key":27},"USN-8490-2",{"_key":29},"USN-8492-4",{"_key":31},"UBUNTU-CVE-2026-23428",{"_key":33},"USN-8492-5",{"_key":35},"USN-8527-1",{"_key":37},"USN-8528-1",[],[],"2026-04-03T15:15:14.981Z","2026-05-23T16:04:47.914Z","Modified",{"cisa_kev":44,"cisa_ransomware":44,"cisa_vendor":9,"epss_severity":45,"epss_score":46,"severity":47,"severity_score":48,"severity_version":49,"severity_source":50,"severity_vector":51,"severity_status":42},false,"low",0.00331,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[53,59,63,67,71,75,79],{"url":54,"sources":55,"tags":57},"https://git.kernel.org/stable/c/eae0dc86f71e6f3294c0cd7ffc05039258d243af",[50,56],"nvd",[58],"Patch",{"url":60,"sources":61,"tags":62},"https://git.kernel.org/stable/c/806f13752652216db0c309392b4db3e64eeed4f2",[50,56],[58],{"url":64,"sources":65,"tags":66},"https://git.kernel.org/stable/c/c742b46a153d3ff95ff0825ab1950c87b9e14470",[50,56],[58],{"url":68,"sources":69,"tags":70},"https://git.kernel.org/stable/c/7f7468fd2a7554cea91b7d430335a3dbf01dcc09",[50,56],[58],{"url":72,"sources":73,"tags":74},"https://git.kernel.org/stable/c/a5929c2020ce54e1dcbd1078c0f30b8aaf73c105",[50,56],[58],{"url":76,"sources":77,"tags":78},"https://git.kernel.org/stable/c/c33615f995aee80657b9fdfbc4ee7f49c2bd733d",[50,56],[58],{"url":80,"sources":81,"tags":82},"https://git.kernel.org/stable/c/d08417981155883068b7260d9500ca306a03edac",[50,56],[58],[],{"date":85,"score":46,"percentile":86},"2026-07-05",0.25033,[88,92,95,98,101,104,108,111,114,117,120,123,126,129,132,135,138,141,144,147,150,154,157,160,163,167,169,172,175,178,181,184,187,190,193,196,199,201,204,207,210,213,215,218,221,224,227,229,231,234,237,240,243,246,249,252,255,257,260,263,266,269,272,275,278,281,284,287,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354],{"date":89,"score":90,"percentile":91},"2026-04-04",0.00024,0.0664,{"date":93,"score":90,"percentile":94},"2026-04-05",0.06635,{"date":96,"score":90,"percentile":97},"2026-04-06",0.06601,{"date":99,"score":90,"percentile":100},"2026-04-07",0.06619,{"date":102,"score":90,"percentile":103},"2026-04-08",0.06669,{"date":105,"score":106,"percentile":107},"2026-04-09",0.00032,0.09265,{"date":109,"score":106,"percentile":110},"2026-04-10",0.09272,{"date":112,"score":106,"percentile":113},"2026-04-11",0.09267,{"date":115,"score":106,"percentile":116},"2026-04-12",0.09236,{"date":118,"score":106,"percentile":119},"2026-04-13",0.09222,{"date":121,"score":106,"percentile":122},"2026-04-14",0.09095,{"date":124,"score":106,"percentile":125},"2026-04-15",0.0911,{"date":127,"score":106,"percentile":128},"2026-04-16",0.09117,{"date":130,"score":106,"percentile":131},"2026-04-17",0.09101,{"date":133,"score":106,"percentile":134},"2026-04-18",0.09098,{"date":136,"score":106,"percentile":137},"2026-04-19",0.09068,{"date":139,"score":106,"percentile":140},"2026-04-20",0.09055,{"date":142,"score":106,"percentile":143},"2026-04-21",0.09252,{"date":145,"score":106,"percentile":146},"2026-04-22",0.09287,{"date":148,"score":106,"percentile":149},"2026-04-23",0.09309,{"date":151,"score":152,"percentile":153},"2026-04-24",0.00013,0.02375,{"date":155,"score":152,"percentile":156},"2026-04-25",0.02387,{"date":158,"score":152,"percentile":159},"2026-04-26",0.02364,{"date":161,"score":152,"percentile":162},"2026-04-27",0.02378,{"date":164,"score":165,"percentile":166},"2026-04-28",0.00028,0.07769,{"date":168,"score":165,"percentile":166},"2026-04-29",{"date":170,"score":165,"percentile":171},"2026-04-30",0.07776,{"date":173,"score":165,"percentile":174},"2026-05-01",0.07723,{"date":176,"score":165,"percentile":177},"2026-05-02",0.07782,{"date":179,"score":165,"percentile":180},"2026-05-03",0.07765,{"date":182,"score":165,"percentile":183},"2026-05-04",0.07738,{"date":185,"score":106,"percentile":186},"2026-05-05",0.09034,{"date":188,"score":106,"percentile":189},"2026-05-06",0.09052,{"date":191,"score":106,"percentile":192},"2026-05-07",0.09198,{"date":194,"score":106,"percentile":195},"2026-05-08",0.09227,{"date":197,"score":106,"percentile":198},"2026-05-09",0.09268,{"date":200,"score":106,"percentile":113},"2026-05-10",{"date":202,"score":106,"percentile":203},"2026-05-11",0.0923,{"date":205,"score":106,"percentile":206},"2026-05-12",0.09253,{"date":208,"score":106,"percentile":209},"2026-05-13",0.09273,{"date":211,"score":106,"percentile":212},"2026-05-14",0.0933,{"date":214,"score":106,"percentile":212},"2026-05-15",{"date":216,"score":106,"percentile":217},"2026-05-16",0.09348,{"date":219,"score":106,"percentile":220},"2026-05-17",0.09333,{"date":222,"score":106,"percentile":223},"2026-05-18",0.09288,{"date":225,"score":106,"percentile":226},"2026-05-19",0.0925,{"date":228,"score":106,"percentile":143},"2026-05-20",{"date":230,"score":106,"percentile":203},"2026-05-21",{"date":232,"score":106,"percentile":233},"2026-05-22",0.09512,{"date":235,"score":106,"percentile":236},"2026-05-23",0.0951,{"date":238,"score":106,"percentile":239},"2026-05-24",0.09508,{"date":241,"score":106,"percentile":242},"2026-05-25",0.09494,{"date":244,"score":106,"percentile":245},"2026-05-26",0.09484,{"date":247,"score":106,"percentile":248},"2026-05-27",0.09548,{"date":250,"score":106,"percentile":251},"2026-05-28",0.09694,{"date":253,"score":106,"percentile":254},"2026-05-29",0.09728,{"date":256,"score":106,"percentile":254},"2026-05-30",{"date":258,"score":106,"percentile":259},"2026-05-31",0.09709,{"date":261,"score":106,"percentile":262},"2026-06-01",0.09681,{"date":264,"score":106,"percentile":265},"2026-06-02",0.0964,{"date":267,"score":106,"percentile":268},"2026-06-03",0.09601,{"date":270,"score":106,"percentile":271},"2026-06-04",0.09616,{"date":273,"score":106,"percentile":274},"2026-06-05",0.09656,{"date":276,"score":106,"percentile":277},"2026-06-06",0.09674,{"date":279,"score":106,"percentile":280},"2026-06-07",0.0965,{"date":282,"score":106,"percentile":283},"2026-06-08",0.09589,{"date":285,"score":106,"percentile":286},"2026-06-09",0.09622,{"date":288,"score":289,"percentile":290},"2026-06-10",0.00037,0.11341,{"date":292,"score":289,"percentile":293},"2026-06-11",0.11377,{"date":295,"score":289,"percentile":296},"2026-06-12",0.11451,{"date":298,"score":289,"percentile":299},"2026-06-13",0.11445,{"date":301,"score":289,"percentile":302},"2026-06-14",0.11412,{"date":304,"score":46,"percentile":305},"2026-06-15",0.2465,{"date":307,"score":46,"percentile":308},"2026-06-16",0.24685,{"date":310,"score":46,"percentile":311},"2026-06-17",0.24705,{"date":313,"score":46,"percentile":314},"2026-06-18",0.24727,{"date":316,"score":46,"percentile":317},"2026-06-19",0.24719,{"date":319,"score":46,"percentile":320},"2026-06-20",0.24709,{"date":322,"score":46,"percentile":323},"2026-06-21",0.2469,{"date":325,"score":46,"percentile":326},"2026-06-22",0.24663,{"date":328,"score":46,"percentile":329},"2026-06-23",0.24731,{"date":331,"score":46,"percentile":332},"2026-06-24",0.24768,{"date":334,"score":46,"percentile":335},"2026-06-25",0.24848,{"date":337,"score":46,"percentile":338},"2026-06-26",0.24884,{"date":340,"score":46,"percentile":341},"2026-06-27",0.24925,{"date":343,"score":46,"percentile":344},"2026-06-28",0.24888,{"date":346,"score":46,"percentile":347},"2026-06-29",0.24893,{"date":349,"score":46,"percentile":350},"2026-06-30",0.24872,{"date":352,"score":46,"percentile":353},"2026-07-01",0.24983,{"date":355,"score":46,"percentile":356},"2026-07-02",0.25007,[358,364],{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":359,"cvss_v4_0":9},{"baseScore":360,"baseSeverity":361,"vectorString":362,"impactScore":48,"exploitabilityScore":363},7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",4.6,{"source":50,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":365,"cvss_v4_0":9},{"baseScore":48,"baseSeverity":366,"vectorString":51,"impactScore":48,"exploitabilityScore":367},"CRITICAL",10,[369,417],{"ecosystem":9,"name":370,"vendor":371,"product":371,"cpe_part":372,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":373},"Linux","linux","a",[374,377,382,386,390,393,396,399,402,404,408,412,416],{"version":375,"is_range":44,"range_type":50,"version_start":375,"version_start_type":376,"version_end":375,"version_end_type":376,"fixed_in":9},"eb947403518ea3d93f6d89264bb1f5416bb0c7d0","including",{"version":378,"is_range":379,"range_type":50,"version_start":375,"version_start_type":376,"version_end":380,"version_end_type":381,"fixed_in":9},">= eb947403518ea3d93f6d89264bb1f5416bb0c7d0, \u003C d08417981155883068b7260d9500ca306a03edac",true,"d08417981155883068b7260d9500ca306a03edac","excluding",{"version":383,"is_range":379,"range_type":50,"version_start":384,"version_start_type":376,"version_end":385,"version_end_type":381,"fixed_in":9},">= 854156d12caa9d36de1cf5f084591c7686cc8a9d, \u003C eae0dc86f71e6f3294c0cd7ffc05039258d243af","854156d12caa9d36de1cf5f084591c7686cc8a9d","eae0dc86f71e6f3294c0cd7ffc05039258d243af",{"version":387,"is_range":379,"range_type":50,"version_start":388,"version_start_type":376,"version_end":389,"version_end_type":381,"fixed_in":9},">= 5005bcb4219156f1bf7587b185080ec1da08518e, \u003C 806f13752652216db0c309392b4db3e64eeed4f2","5005bcb4219156f1bf7587b185080ec1da08518e","806f13752652216db0c309392b4db3e64eeed4f2",{"version":391,"is_range":379,"range_type":50,"version_start":388,"version_start_type":376,"version_end":392,"version_end_type":381,"fixed_in":9},">= 5005bcb4219156f1bf7587b185080ec1da08518e, \u003C c742b46a153d3ff95ff0825ab1950c87b9e14470","c742b46a153d3ff95ff0825ab1950c87b9e14470",{"version":394,"is_range":379,"range_type":50,"version_start":388,"version_start_type":376,"version_end":395,"version_end_type":381,"fixed_in":9},">= 5005bcb4219156f1bf7587b185080ec1da08518e, \u003C 7f7468fd2a7554cea91b7d430335a3dbf01dcc09","7f7468fd2a7554cea91b7d430335a3dbf01dcc09",{"version":397,"is_range":379,"range_type":50,"version_start":388,"version_start_type":376,"version_end":398,"version_end_type":381,"fixed_in":9},">= 5005bcb4219156f1bf7587b185080ec1da08518e, \u003C a5929c2020ce54e1dcbd1078c0f30b8aaf73c105","a5929c2020ce54e1dcbd1078c0f30b8aaf73c105",{"version":400,"is_range":379,"range_type":50,"version_start":388,"version_start_type":376,"version_end":401,"version_end_type":381,"fixed_in":9},">= 5005bcb4219156f1bf7587b185080ec1da08518e, \u003C c33615f995aee80657b9fdfbc4ee7f49c2bd733d","c33615f995aee80657b9fdfbc4ee7f49c2bd733d",{"version":403,"is_range":44,"range_type":50,"version_start":403,"version_start_type":376,"version_end":403,"version_end_type":376,"fixed_in":9},"d1066c1b3663401cd23c0d6e60cdae750ce00c0f",{"version":405,"is_range":379,"range_type":50,"version_start":406,"version_start_type":376,"version_end":407,"version_end_type":381,"fixed_in":9},">= 5.15.121, \u003C 5.15.203","5.15.121","5.15.203",{"version":409,"is_range":379,"range_type":50,"version_start":410,"version_start_type":376,"version_end":411,"version_end_type":381,"fixed_in":9},">= 6.1.36, \u003C 6.1.167","6.1.36","6.1.167",{"version":413,"is_range":379,"range_type":50,"version_start":414,"version_start_type":376,"version_end":415,"version_end_type":381,"fixed_in":9},">= 6.3.10, \u003C 6.4","6.3.10","6.4",{"version":415,"is_range":44,"range_type":50,"version_start":415,"version_start_type":376,"version_end":415,"version_end_type":376,"fixed_in":9},{"ecosystem":9,"name":418,"vendor":371,"product":419,"cpe_part":372,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":420},"Linux Kernel","linux kernel",[421,424,426,428,432,436,440,444,445,447,449,451,453,455,457],{"version":422,"is_range":379,"range_type":423,"version_start":406,"version_start_type":376,"version_end":407,"version_end_type":381,"fixed_in":9},"gte5.15.121_lt5.15.203","cpe",{"version":425,"is_range":379,"range_type":423,"version_start":410,"version_start_type":376,"version_end":411,"version_end_type":381,"fixed_in":9},"gte6.1.36_lt6.1.167",{"version":427,"is_range":379,"range_type":423,"version_start":414,"version_start_type":376,"version_end":415,"version_end_type":381,"fixed_in":9},"gte6.3.10_lt6.4",{"version":429,"is_range":379,"range_type":423,"version_start":430,"version_start_type":376,"version_end":431,"version_end_type":381,"fixed_in":9},"gte6.4.1_lt6.6.130","6.4.1","6.6.130",{"version":433,"is_range":379,"range_type":423,"version_start":434,"version_start_type":376,"version_end":435,"version_end_type":381,"fixed_in":9},"gte6.7_lt6.12.78","6.7","6.12.78",{"version":437,"is_range":379,"range_type":423,"version_start":438,"version_start_type":376,"version_end":439,"version_end_type":381,"fixed_in":9},"gte6.13_lt6.18.20","6.13","6.18.20",{"version":441,"is_range":379,"range_type":423,"version_start":442,"version_start_type":376,"version_end":443,"version_end_type":381,"fixed_in":9},"gte6.19_lt6.19.10","6.19","6.19.10",{"version":415,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":446,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":448,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":450,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":452,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":454,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":456,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":458,"is_range":44,"range_type":423,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]