In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Skip SMB sessions that are being teared down (e.g. @ses->ses_status == SES_EXITING) in cifs_debug_data_proc_show() to avoid use-after-free in @ses.
This fixes the following GPF when reading from /proc/fs/cifs/DebugData while mounting and umounting
[ 816.251274] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6d81: 0000 [#1] PREEMPT SMP NOPTI ... [ 816.260138] Call Trace: [ 816.260329] <TASK> [ 816.260499] ? die_addr+0x36/0x90 [ 816.260762] ? exc_general_protection+0x1b3/0x410 [ 816.261126] ? asm_exc_general_protection+0x26/0x30 [ 816.261502] ? cifs_debug_tcon+0xbd/0x240 [cifs] [ 816.261878] ? cifs_debug_tcon+0xab/0x240 [cifs] [ 816.262249] cifs_debug_data_proc_show+0x516/0xdb0 [cifs] [ 816.262689] ? seq_read_iter+0x379/0x470 [ 816.262995] seq_read_iter+0x118/0x470 [ 816.263291] proc_reg_read_iter+0x53/0x90 [ 816.263596] ? srso_alias_return_thunk+0x5/0x7f [ 816.263945] vfs_read+0x201/0x350 [ 816.264211] ksys_read+0x75/0x100 [ 816.264472] do_syscall_64+0x3f/0x90 [ 816.264750] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 816.265135] RIP: 0033:0x7fd5e669d381
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.10.237-230.949Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf | May 30, 2025 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-xenUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-trace-develUpgrade kernel-obs-qaUpgrade kernel-ec2Upgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-xen-develUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-preempt-develUpgrade dtb-broadcomUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-ec2-baseUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-debug-livepatch-devel | Jul 10, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-227-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-117-genericUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1170-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1179-azureUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-4.4.0-1134-aws | Jul 31, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub