In the Linux kernel, the following vulnerability has been resolved:
cifs: fix underflow in parse_server_interfaces()
In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-coreUpgrade kernel-docUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug | Nov 4, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernelUpgrade perf | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernel | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 30, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-uki-virtUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-core | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preemptUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-develUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-64kb | Jun 12, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-intelUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub