In the Linux kernel, the following vulnerability has been resolved:
fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read.
This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL.
The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-develUpgrade python3-perfUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade rvUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debugUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virt | Jul 8, 2026 | Jul 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade kernel-tools | Jun 23, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 6, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 6, 2026 | May 6, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade bpftool | Jul 13, 2026 | Jul 11, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-5.15Upgrade linux-image-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-6.8 | May 25, 2026 | May 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 22, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub