The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-devel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2011 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-ec2-baseUpgrade kernel-xen-develUpgrade kernel-xenpaeUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-source-vanillaUpgrade kernel-ec2-extraUpgrade kernel-vmi-baseUpgrade kernel-kdumpUpgrade kernel-default-baseUpgrade kernel-vmiUpgrade kernel-default-develUpgrade kernel-vanilla-baseUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-vmipaeUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade kernel-desktopUpgrade kernel-trace-develUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-develUpgrade preload-kmp-desktopUpgrade kernel-traceUpgrade kernel-docsUpgrade preload-kmp-defaultUpgrade kernel-ec2Upgrade kernel-pae-baseUpgrade kernel-vanilla-develUpgrade kernel-desktop-develUpgrade kernel-ec2-develUpgrade kernel-debug-baseUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-desktop-baseUpgrade kernel-smpUpgrade kernel-bigsmpUpgrade kernel-sourceUpgrade kernel-vmi-devel | Feb 17, 2015 | May 24, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.35-30-omap | Nov 8, 2024 | May 24, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | May 24, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub