https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 21:22:14 +0000 https://vulnerability.circl.lu/vuln/cve-2022-50859 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message</p> <p>Commit d5c7076b772a (&#34;smb3: add smb3.1.1 to default dialect list&#34;) extend the dialects from 3 to 4, but forget to decrease the extended length when specific the dialect, then the message length is larger than expected.</p> <p>This maybe leak some info through network because not initialize the message body.</p> <p>After apply this patch, the VALIDATE_NEGOTIATE_INFO message length is reduced from 28 bytes to 26 bytes.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message</p> <p>Commit d5c7076b772a (&#34;smb3: add smb3.1.1 to default dialect list&#34;) extend the dialects from 3 to 4, but forget to decrease the extended length when specific the dialect, then the message length is larger than expected.</p> <p>This maybe leak some info through network because not initialize the message body.</p> <p>After apply this patch, the VALIDATE_NEGOTIATE_INFO message length is reduced from 28 bytes to 26 bytes.</p> https://vulnerability.circl.lu/vuln/cve-2022-50859