In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix UAF in __close_file_table_ids
A use-after-free is possible if one thread destroys the file via __ksmbd_close_fd while another thread holds a reference to it. The existing checks on fp->refcount are not sufficient to prevent this.
The fix takes ft->lock around the section which removes the file from the file table. This prevents two threads acquiring the same file pointer via __close_file_table_ids, as well as the other functions which retrieve a file from the IDR and which already use this same lock.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 28, 2025 | May 20, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-aws-64kUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-azure | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub