In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-nvidia-6.5Upgrade linux-image-oem-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-genericUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-oem-22.04a | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub