In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix dangling pointer in krb_authenticate
krb_authenticate frees sess->user and does not set the pointer to NULL. It calls ksmbd_krb5_authenticate to reinitialise sess->user but that function may return without doing so. If that happens then smb2_sess_setup, which calls krb_authenticate, will be accessing free'd memory when it later uses sess->user.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1107-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-185-genericUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-183-lowlatencyUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-185-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-1116-azure-fipsUpgrade linux-image-5.15.0-1063-nvidia-tegraUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-183-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1110-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1111-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1103-intel-iot-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1106-intel-iotgUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1116-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1105-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-185-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-virtualUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1052-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1111-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1111-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-intelUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1094-gkeopUpgrade linux-image-gkeopUpgrade linux-image-aws-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1106-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1105-raspiUpgrade linux-image-5.15.0-1111-aws-64kUpgrade linux-image-5.15.0-1063-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-1108-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1106-nvidiaUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1103-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1116-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1052-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-185-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-1074-xilinx-zynqmpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1111-aws | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub