In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix dangling pointer in krb_authenticate
krb_authenticate frees sess->user and does not set the pointer to NULL. It calls ksmbd_krb5_authenticate to reinitialise sess->user but that function may return without doing so. If that happens then smb2_sess_setup, which calls krb_authenticate, will be accessing free'd memory when it later uses sess->user.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1108-oracleUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1106-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-gkeopUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1074-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-5.15Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1111-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-185-generic-lpaeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1116-azure-fdeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1106-nvidiaUpgrade linux-image-5.15.0-1105-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1111-aws-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1111-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intelUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-5.15.0-1111-awsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1063-nvidia-tegra-rtUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1052-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1103-kvmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-azure-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-185-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-183-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-183-lowlatencyUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1106-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1105-ibmUpgrade linux-image-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1116-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-185-generic-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-1107-gkeUpgrade linux-image-5.15.0-1103-intel-iot-realtimeUpgrade linux-image-5.15.0-1063-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-185-genericUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1052-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1116-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1110-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1111-aws-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinxUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-64k | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub