A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL, leading to an invalid pointer request.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64kUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-devel | Jul 9, 2024 | May 18, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 18, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Oct 2, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | May 9, 2023 |
| Suse | — | Upgrade kernel-rt | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-38-genericUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1021-lowlatency | Apr 10, 2023 | Mar 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub