In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential OOBs in smb2_parse_contexts()
Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().
This fixes following oops when accessing invalid create contexts from server:
BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 RIP: 0010:smb2_parse_contexts+0xa0/0x3a0 [cifs] Code: f8 10 75 13 48 b8 93 ad 25 50 9c b4 11 e7 49 39 06 0f 84 d2 00 00 00 8b 45 00 85 c0 74 61 41 29 c5 48 01 c5 41 83 fd 0f 76 55 <0f> b7 7d 04 0f b7 45 06 4c 8d 74 3d 00 66 83 f8 04 75 bc ba 04 00 RSP: 0018:ffffc900007939e0 EFLAGS: 00010216 RAX: ffffc90000793c78 RBX: ffff8880180cc000 RCX: ffffc90000793c90 RDX: ffffc90000793cc0 RSI: ffff8880178d8cc0 RDI: ffff8880180cc000 RBP: ffff8881178d8cbf R08: ffffc90000793c22 R09: 0000000000000000 R10: ffff8880180cc000 R11: 0000000000000024 R12: 0000000000000000 R13: 0000000000000020 R14: 0000000000000000 R15: ffffc90000793c22 FS: 00007f873753cbc0(0000) GS:ffff88806bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881178d8cc3 CR3: 00000000181ca000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x181/0x480 ? search_module_extables+0x19/0x60 ? srso_alias_return_thunk+0x5/0xfbef5 ? exc_page_fault+0x1b6/0x1c0 ? asm_exc_page_fault+0x26/0x30 ? smb2_parse_contexts+0xa0/0x3a0 [cifs] SMB2_open+0x38d/0x5f0 [cifs] ? smb2_is_path_accessible+0x138/0x260 [cifs] smb2_is_path_accessible+0x138/0x260 [cifs] cifs_is_path_remote+0x8d/0x230 [cifs] cifs_mount+0x7e/0x350 [cifs] cifs_smb3_do_mount+0x128/0x780 [cifs] smb3_get_tree+0xd9/0x290 [cifs] vfs_get_tree+0x2c/0x100 ? capable+0x37/0x70 path_mount+0x2d7/0xb80 ? srso_alias_return_thunk+0x5/0xfbef5 ? _raw_spin_unlock_irqrestore+0x44/0x60 __x64_sys_mount+0x11a/0x150 do_syscall_64+0x47/0xf0 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f8737657b1e
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade rvUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules | May 31, 2024 | Feb 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.152-100.162Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | Apr 2, 2024 | Feb 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Feb 20, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Feb 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Jun 3, 2024 | Feb 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Jul 1, 2024 | Feb 20, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Feb 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Feb 20, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernelUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug | Jun 17, 2024 | Feb 20, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-devel | Jun 24, 2024 | Feb 20, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1011-starfiveUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-6.5.0-1017-awsUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-27-lowlatency-64kUpgrade linux-image-6.5.0-1020-oracle-64kUpgrade linux-image-6.5.0-27-generic-64kUpgrade linux-image-6.5.0-27-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.5.0-1018-azure-fdeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-6.5.0-1019-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-1020-oracleUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1017-gcpUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-6.5.0-1013-laptopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-6.5.0-1014-raspiUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-intelUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-27-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-azureUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.5.0-1018-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-xilinx-zynqmp | Apr 10, 2024 | Feb 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub