In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix oops due to uninitialised variable
Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-tools-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-toolsUpgrade python3-perf6.12Upgrade kernel6.12-headersUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel-livepatch-6.12.46-66.121 | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 11, 2025 | Sep 5, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Dec 10, 2025 | Sep 5, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade libperf-debuginfoUpgrade python3-perf-debuginfoUpgrade rvUpgrade perfUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-modules-extra-matchedUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-core | Feb 5, 2026 | Dec 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub