In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
An offset from client could be a negative value, It could allows to write data outside the bounds of the allocated buffer. Note that this issue is coming when setting 'vfs objects = streams_xattr parameter' in ksmbd.conf.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oracleUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-fipsUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04 | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub