In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Skip SMB sessions that are being teared down (e.g. @ses->ses_status == SES_EXITING) in cifs_debug_data_proc_show() to avoid use-after-free in @ses.
This fixes the following GPF when reading from /proc/fs/cifs/DebugData while mounting and umounting
[ 816.251274] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6d81: 0000 [#1] PREEMPT SMP NOPTI ... [ 816.260138] Call Trace: [ 816.260329] <TASK> [ 816.260499] ? die_addr+0x36/0x90 [ 816.260762] ? exc_general_protection+0x1b3/0x410 [ 816.261126] ? asm_exc_general_protection+0x26/0x30 [ 816.261502] ? cifs_debug_tcon+0xbd/0x240 [cifs] [ 816.261878] ? cifs_debug_tcon+0xab/0x240 [cifs] [ 816.262249] cifs_debug_data_proc_show+0x516/0xdb0 [cifs] [ 816.262689] ? seq_read_iter+0x379/0x470 [ 816.262995] seq_read_iter+0x118/0x470 [ 816.263291] proc_reg_read_iter+0x53/0x90 [ 816.263596] ? srso_alias_return_thunk+0x5/0x7f [ 816.263945] vfs_read+0x201/0x350 [ 816.264211] ksys_read+0x75/0x100 [ 816.264472] do_syscall_64+0x3f/0x90 [ 816.264750] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 816.265135] RIP: 0033:0x7fd5e669d381
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.237-230.949Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.184-125.190 | May 30, 2025 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-preemptUpgrade kernel-ec2-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-xenUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-xen-baseUpgrade kernel-obs-qaUpgrade kernel-ec2Upgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-trace-develUpgrade kernel-debugUpgrade kernel-default-manUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-traceUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-xen-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-azure-baseUpgrade dtb-hisilicon | Jul 10, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-intelUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-117-genericUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-raspi2Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-ibmUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-5.15.0-1070-azure | Jul 31, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub