In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out of bounds in init_smb2_rsp_hdr()
If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_neg is set to false. This patch ignore smb1 packets after ->need_neg is set to false.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1060-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-102-generic-lpae | Apr 10, 2024 | Feb 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub