A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.
We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.56-82.125Upgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Oct 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-362_8_1Upgrade kpatch-patch-5_14_0-362_8_1-debuginfoUpgrade kpatch-patch-5_14_0-362_8_1-debugsourceUpgrade kernel | Dec 13, 2023 | Oct 3, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 14, 2023 | Oct 2, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 13, 2023 | Oct 3, 2023 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-syms-rt | Oct 11, 2023 | Oct 3, 2023 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1008-oemUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1017-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1017-azureUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1017-kvmUpgrade linux-image-6.2.0-37-genericUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-13-genericUpgrade linux-image-6.2.0-1017-lowlatencyUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-laptop-23.10Upgrade linux-image-awsUpgrade linux-image-6.2.0-1017-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.2.0-1017-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1019-gcpUpgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1012-nvidia-64kUpgrade linux-image-6.2.0-1012-nvidiaUpgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1016-awsUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-6.2.0-37-generic-64kUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-6.2.0-37-generic-lpaeUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-6.2.0-1016-oracleUpgrade linux-image-nvidia-6.2Upgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04 | Nov 1, 2023 | Oct 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub