In the Linux kernel, the following vulnerability has been resolved:
cifs: prevent NULL deref in cifs_compose_mount_options()
The optional @ref parameter might contain an NULL node_name, so prevent dereferencing it in cifs_compose_mount_options().
Addresses-Coverity: 1476408 ("Explicit null dereferenced")
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfo | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade reiserfs-kmp-default | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-azure-fde-5.15Upgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-azureUpgrade linuxUpgrade linux-ibmUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-gcp-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub