In the Linux kernel, the following vulnerability has been resolved:
cifs: prevent use-after-free by freeing the cfile later
In smb2_compound_op we have a possible use-after-free which can cause hard to debug problems later on.
This was revealed during stress testing with KASAN enabled kernel. Fixing it by moving the cfile free call to a few lines below, after the usage.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf | Oct 16, 2025 | Sep 18, 2025 |
| Debian | — | Upgrade linux | Sep 22, 2025 | Sep 22, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub