In the Linux kernel, the following vulnerability has been resolved:
cifs: potential buffer overflow in handling symlinks
Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcpy() 'dctx->buf' too small (16 vs u32max)
It's caused because Smatch marks 'link_len' as untrusted since it comes from sscanf(). Add a check to ensure that 'link_len' is not larger than the size of the 'link_str' buffer.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel | Jul 17, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.112-108.499Upgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.276-211.499Upgrade kernel-debuginfo-common-x86_64 | May 21, 2025 | Feb 26, 2025 |
| Amazon_linux | — | Upgrade kernel | May 22, 2025 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 18, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools | Feb 5, 2026 | Jul 29, 2025 |
| Ubuntu | — | Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-hweUpgrade linux-ibm-5.4Upgrade linux-realtimeUpgrade linux-gkeUpgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-awsUpgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-ibmUpgrade linux-gcp-4.15Upgrade linux-hwe-5.15Upgrade linux-iotUpgrade linux-raspi-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-bluefieldUpgrade linux-aws-fips | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub