In the Linux kernel, the following vulnerability has been resolved:
fs/smb: Fix inconsistent refcnt update
A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks.
Why it is a possible bug: 1. In the comment section of the function, it clearly states that the reference to `cfile` should be dropped after calling this function. 2. Every control flow path would check and drop the reference to `cfile`, except the patched one. 3. Existing callers would not handle refcount update of `cfile` if -ENOMEM is returned.
To fix the bug, an extra goto label "out" is added, to make sure that the cleanup logic would always be respected. As the problem is caused by the allocation failure of `vars`, the cleanup logic between label "finished" and "out" can be safely ignored. According to the definition of function `is_replayable_error`, the error code of "-ENOMEM" is not recoverable. Therefore, the replay logic also gets ignored.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel6.12-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf6.12Upgrade kernel6.12-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-tools-develUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel6.12-libbpfUpgrade kernel-toolsUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade bpftool6.12Upgrade perf-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-tools-debuginfoUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade bpftool6.12-debuginfo | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 29, 2025 | Sep 16, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 29, 2025 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade libperfUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-devel | Feb 5, 2026 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-nvidia | Mar 17, 2026 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub