The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate session id and tree id in the compound request
This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-6.2.0-1015-awsUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1016-azureUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-86-genericUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1049-azureUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1008-starfive | Oct 6, 2023 | Oct 4, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub