In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Skip SMB sessions that are being teared down (e.g. @ses->ses_status == SES_EXITING) in cifs_debug_data_proc_show() to avoid use-after-free in @ses.
This fixes the following GPF when reading from /proc/fs/cifs/DebugData while mounting and umounting
[ 816.251274] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6d81: 0000 [#1] PREEMPT SMP NOPTI ... [ 816.260138] Call Trace: [ 816.260329] <TASK> [ 816.260499] ? die_addr+0x36/0x90 [ 816.260762] ? exc_general_protection+0x1b3/0x410 [ 816.261126] ? asm_exc_general_protection+0x26/0x30 [ 816.261502] ? cifs_debug_tcon+0xbd/0x240 [cifs] [ 816.261878] ? cifs_debug_tcon+0xab/0x240 [cifs] [ 816.262249] cifs_debug_data_proc_show+0x516/0xdb0 [cifs] [ 816.262689] ? seq_read_iter+0x379/0x470 [ 816.262995] seq_read_iter+0x118/0x470 [ 816.263291] proc_reg_read_iter+0x53/0x90 [ 816.263596] ? srso_alias_return_thunk+0x5/0x7f [ 816.263945] vfs_read+0x201/0x350 [ 816.264211] ksys_read+0x75/0x100 [ 816.264472] do_syscall_64+0x3f/0x90 [ 816.264750] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 816.265135] RIP: 0033:0x7fd5e669d381
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-devel | May 30, 2025 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfo | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-preemptUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-ec2-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-ec2-baseUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-default-manUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-trace-develUpgrade cluster-md-kmp-azureUpgrade kernel-xen-develUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-ec2Upgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade dtb-amazonUpgrade kernel-azure-extra | Jul 10, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-ibmUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1170-awsUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-intelUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-4.4.0-1134-aws | Jul 31, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub