A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-docUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-zfcpdump | Dec 4, 2023 | Nov 1, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 29, 2023 | Nov 1, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 1, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 2, 2023 | Oct 2, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 29, 2023 | Nov 1, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo | Mar 5, 2024 | Nov 1, 2023 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-trace-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade kernel-xen-develUpgrade dtb-broadcomUpgrade kernel-trace-baseUpgrade kernel-zfcpdump-manUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-vanillaUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-alUpgrade kernel-traceUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-rtUpgrade kernel-debug-baseUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-ec2-baseUpgrade dtb-zteUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-vanilla-baseUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-xenUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-xen-baseUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-vanilla-develUpgrade gfs2-kmp-azure | Oct 6, 2023 | Oct 5, 2023 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-azureUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-gkeop-5.15Upgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-fdeUpgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-aws-5.15Upgrade linux-kvmUpgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-ibm-5.15Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-intel-iot-realtimeUpgrade linux-gkeopUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-oem-6.1Upgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-nvidia-tegra-igx | Nov 19, 2024 | Nov 1, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub