In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Skip SMB sessions that are being teared down (e.g. @ses->ses_status == SES_EXITING) in cifs_debug_data_proc_show() to avoid use-after-free in @ses.
This fixes the following GPF when reading from /proc/fs/cifs/DebugData while mounting and umounting
[ 816.251274] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6d81: 0000 [#1] PREEMPT SMP NOPTI ... [ 816.260138] Call Trace: [ 816.260329] <TASK> [ 816.260499] ? die_addr+0x36/0x90 [ 816.260762] ? exc_general_protection+0x1b3/0x410 [ 816.261126] ? asm_exc_general_protection+0x26/0x30 [ 816.261502] ? cifs_debug_tcon+0xbd/0x240 [cifs] [ 816.261878] ? cifs_debug_tcon+0xab/0x240 [cifs] [ 816.262249] cifs_debug_data_proc_show+0x516/0xdb0 [cifs] [ 816.262689] ? seq_read_iter+0x379/0x470 [ 816.262995] seq_read_iter+0x118/0x470 [ 816.263291] proc_reg_read_iter+0x53/0x90 [ 816.263596] ? srso_alias_return_thunk+0x5/0x7f [ 816.263945] vfs_read+0x201/0x350 [ 816.264211] ksys_read+0x75/0x100 [ 816.264472] do_syscall_64+0x3f/0x90 [ 816.264750] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 816.265135] RIP: 0033:0x7fd5e669d381
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo | May 30, 2025 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade kernel-ec2-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-xen-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-traceUpgrade kernel-rt_debug-develUpgrade kernel-default-manUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-trace-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-ec2Upgrade dtb-caviumUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-xen-develUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-xenUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-trace-baseUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-develUpgrade dtb-lgUpgrade kernel-source-rt | Jul 10, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-bluefieldUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1129-oracle | Jul 31, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub