A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.
We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel | Feb 17, 2025 | Oct 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-362_8_1-debugsourceUpgrade kpatch-patch-5_14_0-362_8_1-debuginfoUpgrade kpatch-patch-5_14_0-362_8_1Upgrade kernel | Dec 13, 2023 | Oct 3, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 14, 2023 | Oct 2, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 13, 2023 | Oct 3, 2023 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-qcomUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-debug | Oct 11, 2023 | Oct 3, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-6.5.0-1008-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-6.2.0-37-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-1017-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1016-oracleUpgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-37-generic-64kUpgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-6.2.0-1017-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-37-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-6.2.0-1017-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.2.0-1017-lowlatency-64kUpgrade linux-image-6.2.0-1016-awsUpgrade linux-image-6.2.0-1019-gcpUpgrade linux-image-6.2.0-1012-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1017-lowlatencyUpgrade linux-image-6.5.0-13-genericUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-laptop-23.10Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1017-kvmUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-6.2.0-1012-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.5.0-1010-aws | Nov 1, 2023 | Oct 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub