In the Linux kernel, the following vulnerability has been resolved:
smb: Fix regression in writes when non-standard maximum write size negotiated
The conversion to netfs in the 6.3 kernel caused a regression when maximum write size is set by the server to an unexpected value which is not a multiple of 4096 (similarly if the user overrides the maximum write size by setting mount parm "wsize", but sets it to a value that is not a multiple of 4096). When negotiated write size is not a multiple of 4096 the netfs code can skip the end of the final page when doing large sequential writes, causing data corruption.
This section of code is being rewritten/removed due to a large netfs change, but until that point (ie for the 6.3 kernel until now) we can not support non-standard maximum write sizes.
Add a warning if a user specifies a wsize on mount that is not a multiple of 4096 (and round down), also add a change where we round down the maximum write size if the server negotiates a value that is not a multiple of 4096 (we also have to check to make sure that we do not round it down to zero).
CVSS Details
- CVSS 3.1 Base Score: 8.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade dtb-armUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extra | Jun 13, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5Upgrade linux-raspi-realtime | Nov 19, 2024 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub