The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
CVSS Details
- CVSS 3.1 Base Score: 4.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debug | Dec 1, 2016 | Jun 8, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 8, 2013 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-desktopUpgrade kernel-trace-baseUpgrade kernel-vmi-baseUpgrade kernel-vanilla-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-traceUpgrade kernel-debug-baseUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-ec2-baseUpgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-iseries64Upgrade preload-kmp-desktopUpgrade preload-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade kernel-smpUpgrade kernel-vmiUpgrade kernel-source-vanillaUpgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-vanillaUpgrade kernel-desktop-baseUpgrade kernel-bigsmpUpgrade kernel-vmi-develUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-pae-develUpgrade kernel-vmipaeUpgrade kernel-paeUpgrade kernel-desktop-develUpgrade kernel-debug-develUpgrade kernel-kdumppaeUpgrade kernel-ec2-extra | Feb 17, 2015 | Jun 8, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.24-30-hppa32 | Nov 8, 2024 | Jun 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub