In the Linux kernel, the following vulnerability has been resolved:
smb: client: guarantee refcounted children from parent session
Avoid potential use-after-free bugs when walking DFS referrals, mounting and performing DFS failover by ensuring that all children from parent @tcon->ses are also refcounted. They're all needed across the entire DFS mount. Get rid of @tcon->dfs_ses_list while we're at it, too.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-default | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1011-aws | Jul 12, 2024 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub