In the Linux kernel, the following vulnerability has been resolved:
ksmbd: add refcnt to ksmbd_conn struct
When sending an oplock break request, opinfo->conn is used, But freed ->conn can be used on multichannel. This patch add a reference count to the ksmbd_conn struct so that it can be freed when it is no longer used.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-azureUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04 | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub