A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL, leading to an invalid pointer request.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade perfUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extra | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfo | Jul 9, 2024 | May 18, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 18, 2023 |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Jul 22, 2024 | Oct 2, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Suse | — | suse-upgrade-kernel-rt | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | ubuntu-upgrade-linux-image-5-19-0-1015-raspiubuntu-upgrade-linux-image-5-19-0-1015-raspi-nolpaeubuntu-upgrade-linux-image-5-19-0-1019-gcpubuntu-upgrade-linux-image-5-19-0-1019-ibmubuntu-upgrade-linux-image-5-19-0-1019-oracleubuntu-upgrade-linux-image-5-19-0-1020-kvmubuntu-upgrade-linux-image-5-19-0-1021-lowlatencyubuntu-upgrade-linux-image-5-19-0-1021-lowlatency-64kubuntu-upgrade-linux-image-5-19-0-1022-awsubuntu-upgrade-linux-image-5-19-0-1022-azureubuntu-upgrade-linux-image-5-19-0-38-genericubuntu-upgrade-linux-image-5-19-0-38-generic-64kubuntu-upgrade-linux-image-5-19-0-38-generic-lpaeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-22-04ubuntu-upgrade-linux-image-generic-hwe-22-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-22-04ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-22-04 | Apr 10, 2023 | Mar 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub