In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-intelUpgrade linux-image-starfiveUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.5.0-1021-nvidia-64k | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub