A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.
We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.56-82.125Upgrade perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-devel | Feb 17, 2025 | Oct 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-362_8_1-debuginfoUpgrade kpatch-patch-5_14_0-362_8_1-debugsourceUpgrade kpatch-patch-5_14_0-362_8_1Upgrade kernel | Dec 13, 2023 | Oct 3, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 14, 2023 | Oct 2, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 13, 2023 | Oct 3, 2023 |
| Suse | — | Upgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-exynosUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dlm-kmp-default | Oct 11, 2023 | Oct 3, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1017-raspiUpgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-37-generic-lpaeUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-6.2.0-37-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1017-azure-fdeUpgrade linux-image-6.2.0-1017-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1017-lowlatencyUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-37-genericUpgrade linux-image-6.5.0-13-genericUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1012-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1016-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1017-lowlatency-64kUpgrade linux-image-6.2.0-1012-nvidiaUpgrade linux-image-6.2.0-1019-gcpUpgrade linux-image-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-1016-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1017-azureUpgrade linux-image-6.5.0-1008-oem | Nov 1, 2023 | Oct 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub