In the Linux kernel, the following vulnerability has been resolved:
cifs: fix underflow in parse_server_interfaces()
In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-tools | Nov 4, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extra | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 30, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade libperfUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-modules-core | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade kernel-source-rt | Jun 12, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-intelUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-starfive | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub