In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
There is a race condition between ksmbd_smb2_session_create and ksmbd_expire_session. This patch add missing sessions_table_lock while adding/deleting session from global session table.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Nov 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04b | Feb 20, 2025 | Nov 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub