An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Mar 10, 2021 | Sep 4, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Mar 23, 2020 | Sep 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Feb 10, 2021 | Sep 4, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Mar 10, 2021 | Sep 4, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-man | Sep 21, 2019 | Sep 4, 2019 |
| Ubuntu | — | Upgrade linux-hweUpgrade linuxUpgrade linux-snapdragonUpgrade linux-azureUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-oem-osp1Upgrade linux-azure-edge | Nov 19, 2024 | Sep 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub