The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a "cache stuffing" issue and MS-DFS referrals.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel | Dec 1, 2016 | Sep 8, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 8, 2010 |
| Suse | — | Upgrade kernel-vmi-develUpgrade kernel-pae-develUpgrade kernel-desktop-develUpgrade kernel-vanilla-develUpgrade preload-kmp-desktopUpgrade kernel-source-vanillaUpgrade preload-kmp-defaultUpgrade kernel-defaultUpgrade kernel-paeUpgrade kernel-debug-baseUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-desktop-baseUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-trace-develUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-vanillaUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade kernel-vanilla-baseUpgrade kernel-debug-develUpgrade kernel-trace-baseUpgrade kernel-debugUpgrade kernel-desktop | Feb 17, 2015 | Sep 8, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.35-25-virtual | Nov 8, 2024 | Sep 8, 2010 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.0 to build number 360236Upgrade VMware ESX 4.1 to build number 348481 | Feb 16, 2011 | Sep 8, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub