Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-docUpgrade kernel-xen-devel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 24, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2011 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-docsUpgrade kernel-ppc64-baseUpgrade kernel-xen-baseUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-pae-baseUpgrade kernel-trace-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.24-29-sparc64 | Nov 8, 2024 | May 24, 2012 |
| Vmsa 2012 0006 | — | Upgrade VMware ESX 4.0 to build number 660575 | Aug 17, 2012 | May 24, 2012 |
| Vmsa 2012 0008 | — | Upgrade VMware ESX 4.1 to build number 659051 | Aug 17, 2012 | May 24, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub