In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1054-nvidia | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub