The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-docUpgrade kernel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2011 |
| Suse | — | Upgrade kernel-desktopUpgrade kernel-kdumpUpgrade kernel-trace-baseUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-vanilla-baseUpgrade preload-kmp-desktopUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-kdumppaeUpgrade kernel-xenpaeUpgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-trace-develUpgrade kernel-vmi-baseUpgrade kernel-vmiUpgrade kernel-xenUpgrade kernel-ec2-baseUpgrade kernel-vanillaUpgrade kernel-vmipaeUpgrade kernel-ec2-extraUpgrade kernel-desktop-develUpgrade kernel-ec2Upgrade kernel-traceUpgrade kernel-paeUpgrade kernel-vmi-develUpgrade kernel-desktop-baseUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-bigsmpUpgrade kernel-pae-baseUpgrade preload-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-smp | Feb 17, 2015 | May 24, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.38-10-generic | Nov 8, 2024 | May 24, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | May 24, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub