In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix oops due to uninitialised variable
Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftool6.12Upgrade kernel6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpfUpgrade perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel6.12-headers | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 11, 2025 | Sep 5, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Dec 10, 2025 | Sep 5, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virt | Feb 5, 2026 | Dec 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub