In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
An offset from client could be a negative value, It could lead to an out-of-bounds read from the stream_buf. Note that this issue is coming when setting 'vfs objects = streams_xattr parameter' in ksmbd.conf.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-intelUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-64k | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub