In the Linux kernel, the following vulnerability has been resolved:
cifs: fix underflow in parse_server_interfaces()
In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-64k-develUpgrade kernel-docUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-rt | Nov 4, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-develUpgrade python3-perf | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perf | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 30, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade bpftool-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel-matchedUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modules-core | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-64kb-optional | Jun 12, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1128-aws | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub