In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Skip SMB sessions that are being teared down (e.g. @ses->ses_status == SES_EXITING) in cifs_debug_data_proc_show() to avoid use-after-free in @ses.
This fixes the following GPF when reading from /proc/fs/cifs/DebugData while mounting and umounting
[ 816.251274] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6d81: 0000 [#1] PREEMPT SMP NOPTI ... [ 816.260138] Call Trace: [ 816.260329] <TASK> [ 816.260499] ? die_addr+0x36/0x90 [ 816.260762] ? exc_general_protection+0x1b3/0x410 [ 816.261126] ? asm_exc_general_protection+0x26/0x30 [ 816.261502] ? cifs_debug_tcon+0xbd/0x240 [cifs] [ 816.261878] ? cifs_debug_tcon+0xab/0x240 [cifs] [ 816.262249] cifs_debug_data_proc_show+0x516/0xdb0 [cifs] [ 816.262689] ? seq_read_iter+0x379/0x470 [ 816.262995] seq_read_iter+0x118/0x470 [ 816.263291] proc_reg_read_iter+0x53/0x90 [ 816.263596] ? srso_alias_return_thunk+0x5/0x7f [ 816.263945] vfs_read+0x201/0x350 [ 816.264211] ksys_read+0x75/0x100 [ 816.264472] do_syscall_64+0x3f/0x90 [ 816.264750] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 816.265135] RIP: 0033:0x7fd5e669d381
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.237-230.949Upgrade bpftoolUpgrade python-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.184-125.190 | May 30, 2025 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.66-91.160Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extra | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-ec2-baseUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-ec2-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-traceUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-xenUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-preempt-develUpgrade gfs2-kmp-64kbUpgrade kernel-ec2Upgrade kernel-default-livepatch-develUpgrade kernel-trace-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-xen-baseUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-trace-baseUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-default-devel | Jul 10, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1179-azureUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.4.0-1134-awsUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-raspiUpgrade linux-image-aws-hweUpgrade linux-image-bluefieldUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1066-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-117-genericUpgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-awsUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-5.4.0-1129-oracle | Jul 31, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub