Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-develUpgrade kernel-xen-devel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 24, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2011 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-default-manUpgrade kernel-pae-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.32-35-virtual | Nov 8, 2024 | May 24, 2012 |
| Vmsa 2012 0006 | — | Upgrade VMware ESX 4.0 to build number 660575 | Aug 17, 2012 | May 24, 2012 |
| Vmsa 2012 0008 | — | Upgrade VMware ESX 4.1 to build number 659051 | Aug 17, 2012 | May 24, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub