In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix oops due to uninitialised variable
Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12Upgrade kernel6.12-libbpf-staticUpgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools-develUpgrade kernel6.12-develUpgrade kernel6.12-headersUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-debuginfo | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Dec 10, 2025 | Sep 5, 2025 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-modules-extra-matchedUpgrade libperfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-core | Feb 5, 2026 | Dec 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub