The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
smb: client: reject a tree connect response whose byte count is too small
CIFSTCon() bounds its strnlen() over the byte area with the server's ByteCount minus two, which for ByteCount 0 or 1 goes negative as an int and converts to a huge size_t. The later subtraction wraps the __u16 bytes_left, and that is what bounds cifs_strndup_from_utf16(): a bound of up to 65535 against a ~16 KB cifs_req_poolp object runs off the end of the slab object, and the bytes reach userspace through tcon->nativeFileSystem in /proc/fs/cifs/DebugData.
Reject a byte area too small for what the parser consumes. Two bytes is the least it can consume, and no conformant response carries fewer. The new trace point is the 129th smb_eio_trace entry, which __mode(byte) cannot represent, so the attribute goes with it.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelists | Oct 21, 2026 | Oct 20, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 21, 2026 | Sep 11, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade libperf-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade rtlaUpgrade kernel-modulesUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernelUpgrade python3-perf-debuginfo | Oct 23, 2026 | Oct 21, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub