A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.
We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Oct 2, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-5_14_0-362_8_1-debuginfoUpgrade kpatch-patch-5_14_0-362_8_1Upgrade kpatch-patch-5_14_0-362_8_1-debugsource | Dec 13, 2023 | Oct 3, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 14, 2023 | Oct 2, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 13, 2023 | Oct 3, 2023 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kernel-default-extraUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-default | Oct 11, 2023 | Oct 3, 2023 |
| Ubuntu | — | Upgrade linux-image-6.5.0-13-genericUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1017-lowlatencyUpgrade linux-image-6.2.0-1016-awsUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-laptop-23.10Upgrade linux-image-6.2.0-1019-gcpUpgrade linux-image-6.2.0-37-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1012-nvidia-64kUpgrade linux-image-6.2.0-1017-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-6.2.0-1017-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-6.2.0-1017-kvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1012-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1017-raspiUpgrade linux-image-6.2.0-1016-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.5.0-1008-oemUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-37-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-oem-22.04Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-6.2.0-37-generic-lpaeUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-6.2.0-1017-azureUpgrade linux-image-starfiveUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency | Nov 1, 2023 | Oct 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub