In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential OOBs in smb2_parse_contexts()
Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().
This fixes following oops when accessing invalid create contexts from server:
BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 RIP: 0010:smb2_parse_contexts+0xa0/0x3a0 [cifs] Code: f8 10 75 13 48 b8 93 ad 25 50 9c b4 11 e7 49 39 06 0f 84 d2 00 00 00 8b 45 00 85 c0 74 61 41 29 c5 48 01 c5 41 83 fd 0f 76 55 <0f> b7 7d 04 0f b7 45 06 4c 8d 74 3d 00 66 83 f8 04 75 bc ba 04 00 RSP: 0018:ffffc900007939e0 EFLAGS: 00010216 RAX: ffffc90000793c78 RBX: ffff8880180cc000 RCX: ffffc90000793c90 RDX: ffffc90000793cc0 RSI: ffff8880178d8cc0 RDI: ffff8880180cc000 RBP: ffff8881178d8cbf R08: ffffc90000793c22 R09: 0000000000000000 R10: ffff8880180cc000 R11: 0000000000000024 R12: 0000000000000000 R13: 0000000000000020 R14: 0000000000000000 R15: ffffc90000793c22 FS: 00007f873753cbc0(0000) GS:ffff88806bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881178d8cc3 CR3: 00000000181ca000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x181/0x480 ? search_module_extables+0x19/0x60 ? srso_alias_return_thunk+0x5/0xfbef5 ? exc_page_fault+0x1b6/0x1c0 ? asm_exc_page_fault+0x26/0x30 ? smb2_parse_contexts+0xa0/0x3a0 [cifs] SMB2_open+0x38d/0x5f0 [cifs] ? smb2_is_path_accessible+0x138/0x260 [cifs] smb2_is_path_accessible+0x138/0x260 [cifs] cifs_is_path_remote+0x8d/0x230 [cifs] cifs_mount+0x7e/0x350 [cifs] cifs_smb3_do_mount+0x128/0x780 [cifs] smb3_get_tree+0xd9/0x290 [cifs] vfs_get_tree+0x2c/0x100 ? capable+0x37/0x70 path_mount+0x2d7/0xb80 ? srso_alias_return_thunk+0x5/0xfbef5 ? _raw_spin_unlock_irqrestore+0x44/0x60 __x64_sys_mount+0x11a/0x150 do_syscall_64+0x47/0xf0 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f8737657b1e
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-devel-matched | May 31, 2024 | Feb 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-livepatch-5.10.213-201.855Upgrade python-perf | Apr 2, 2024 | Feb 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-headers | Feb 17, 2025 | Feb 20, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Feb 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jun 3, 2024 | Feb 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 1, 2024 | Feb 20, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Feb 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 23, 2024 | Feb 20, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt | Jun 17, 2024 | Feb 20, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade kernel-devel-azure | Jun 24, 2024 | Feb 20, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1018-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1017-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1011-starfiveUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.5.0-1020-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-6.5.0-1019-oemUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-6.5.0-27-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1020-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-6.5.0-27-lowlatencyUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-27-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-intelUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-starfiveUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.5.0-1018-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1013-laptopUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-6.5.0-1017-gcpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-27-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-6.5.0-1014-raspiUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-oemUpgrade linux-image-5.15.0-1066-azure | Apr 10, 2024 | Feb 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub