The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xen-devel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2011 |
| Suse | — | Upgrade kernel-vmi-develUpgrade preload-kmp-defaultUpgrade kernel-bigsmpUpgrade kernel-vanilla-develUpgrade kernel-docsUpgrade kernel-smpUpgrade kernel-ec2-develUpgrade kernel-desktop-baseUpgrade kernel-traceUpgrade kernel-pae-develUpgrade kernel-desktop-develUpgrade kernel-sourceUpgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-debug-baseUpgrade kernel-vmiUpgrade kernel-iseries64Upgrade kernel-vmi-baseUpgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade kernel-vanillaUpgrade kernel-ec2-extraUpgrade kernel-source-vanillaUpgrade kernel-kdumpUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-kdumppaeUpgrade kernel-trace-baseUpgrade kernel-desktopUpgrade kernel-xenpaeUpgrade kernel-ec2-baseUpgrade kernel-vmipaeUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade preload-kmp-desktopUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-devel | Feb 17, 2015 | May 24, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-33-lpia | Nov 8, 2024 | May 24, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | May 24, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub