A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.
We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.56-82.125Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf | Feb 17, 2025 | Oct 2, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-5_14_0-362_8_1-debuginfoUpgrade kpatch-patch-5_14_0-362_8_1Upgrade kpatch-patch-5_14_0-362_8_1-debugsource | Dec 13, 2023 | Oct 3, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 14, 2023 | Oct 2, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 13, 2023 | Oct 3, 2023 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-altera | Oct 11, 2023 | Oct 3, 2023 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1016-awsUpgrade linux-image-6.2.0-1019-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1012-nvidiaUpgrade linux-image-6.2.0-1017-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.2.0-1012-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1017-lowlatency-64kUpgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-6.2.0-1017-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-laptop-23.10Upgrade linux-image-oracleUpgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1017-lowlatencyUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-6.2.0-37-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-6.5.0-13-genericUpgrade linux-image-awsUpgrade linux-image-starfiveUpgrade linux-image-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-6.2.0-37-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1017-raspiUpgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-6.2.0-1017-azureUpgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1016-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.5.0-1008-oemUpgrade linux-image-6.2.0-37-generic-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-azureUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04 | Nov 1, 2023 | Oct 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub