In the Linux kernel, the following vulnerability has been resolved:
cifs: potential buffer overflow in handling symlinks
Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcpy() 'dctx->buf' too small (16 vs u32max)
It's caused because Smatch marks 'link_len' as untrusted since it comes from sscanf(). Add a check to ensure that 'link_len' is not larger than the size of the 'link_str' buffer.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-devel | Jul 17, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.276-211.499Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfo | May 21, 2025 | Feb 26, 2025 |
| Amazon_linux | — | Upgrade kernel | May 22, 2025 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 18, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade perf-debuginfo | Feb 5, 2026 | Jul 29, 2025 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-azure-4.15Upgrade linux-hwe-5.15Upgrade linux-bluefieldUpgrade linux-iotUpgrade linux-gcp-5.4Upgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linuxUpgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-ibm-5.4Upgrade linux-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-aws-hweUpgrade linux-intel-iotgUpgrade linux-oracle-5.4 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub