In the Linux kernel, the following vulnerability has been resolved:
cifs: fix underflow in parse_server_interfaces()
In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-develUpgrade kernel-64k-debugUpgrade kernel-develUpgrade bpftoolUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rtUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-core | Nov 4, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-tools | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-headers | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 30, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade rtlaUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade python3-perfUpgrade libperf-debuginfoUpgrade libperfUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extra | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-manUpgrade kernel-rtUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade dtb-mediatek | Jun 12, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-starfiveUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-gkeop | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub