In the Linux kernel, the following vulnerability has been resolved:
cifs: fix mid leak during reconnection after timeout threshold
When the number of responses with status of STATUS_IO_TIMEOUT exceeds a specified threshold (NUM_STATUS_IO_TIMEOUT), we reconnect the connection. But we do not return the mid, or the credits returned for the mid, or reduce the number of in-flight requests.
This bug could result in the server->in_flight count to go bad, and also cause a leak in the mids.
This change moves the check to a few lines below where the response is decrypted, even of the response is read from the transform header. This way, the code for returning the mids can be reused.
Also, the cifs_reconnect was reconnecting just the transport connection before. In case of multi-channel, this may not be what we want to do after several timeouts. Changed that to reconnect the session and the tree too.
Also renamed NUM_STATUS_IO_TIMEOUT to a more appropriate name MAX_STATUS_IO_TIMEOUT.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.152-100.162Upgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 10, 2026 | Mar 10, 2026 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-azureUpgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-oracle-5.15 | Oct 10, 2025 | Oct 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub