In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix oops due to uninitialised var in smb2_unlink()
If SMB2_open_init() or SMB2_close_init() fails (e.g. reconnect), the iovs set @rqst will be left uninitialised, hence calling SMB2_open_free(), SMB2_close_free() or smb2_set_related() on them will oops.
Fix this by initialising @close_iov and @open_iov before setting them in @rqst.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfoUpgrade kernel6.18-libbpf-develUpgrade kernel6.18-libbpf-staticUpgrade bpftool6.18-debuginfoUpgrade perf6.18Upgrade python3-perf6.18-debuginfoUpgrade python3-perf6.18Upgrade perf6.18-debuginfoUpgrade bpftool6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-libbpfUpgrade kernel6.18-modules-extraUpgrade kernel-livepatch-6.18.20-20.229Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18Upgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-headersUpgrade kernel6.18-tools | May 4, 2026 | Mar 25, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub