In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix null pointer dereference in destroy_previous_session
If client set ->PreviousSessionId on kerberos session setup stage, NULL pointer dereference error will happen. Since sess->user is not set yet, It can pass the user argument as NULL to destroy_previous_session. sess->user will be set in ksmbd_krb5_authenticate(). So this patch move calling destroy_previous_session() after ksmbd_krb5_authenticate().
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 7, 2025 | Jul 4, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-nvidiaUpgrade linux-image-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-gke-64kUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-gke-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtime | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub