In the Linux kernel, the following vulnerability has been resolved:
cifs: parse_dfs_referrals: prevent oob on malformed input
Malicious SMB server can send invalid reply to FSCTL_DFS_GET_REFERRALS
- reply smaller than sizeof(struct get_dfs_referral_rsp) - reply with number of referrals smaller than NumberOfReferrals in the header
Processing of such replies will cause oob.
Return -EINVAL error on such replies to prevent oob-s.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-toolsUpgrade kernel-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.158-178.288Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpfUpgrade perf6.12-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-develUpgrade perf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade bpftool6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel6.12-headersUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.55-74.119Upgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-develUpgrade bpftool-debuginfo | Dec 9, 2025 | Oct 30, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 13, 2025 | Nov 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 11, 2025 | Oct 30, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 30, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-6.17Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-realtime-6.17Upgrade linux-image-ibm-6.8Upgrade linux-image-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-6.17Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-xilinxUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-oem-6.17Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-fipsUpgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-6.17Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.17Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-raspi-6.17 | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Oct 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub