In the Linux kernel, the following vulnerability has been resolved:
cifs: prevent NULL pointer dereference in UTF16 conversion
There can be a NULL pointer dereference bug here. NULL is passed to __cifs_sfu_make_node without checks, which passes it unchecked to cifs_strndup_to_utf16, which in turn passes it to cifs_local_to_utf16_bytes where '*from' is dereferenced, causing a crash.
This patch adds a check for NULL 'src' in cifs_strndup_to_utf16 and returns NULL early to prevent dereferencing NULL pointer.
Found by Linux Verification Center (linuxtesting.org) with SVACE
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12Upgrade bpftool6.12Upgrade perf6.12Upgrade kernel6.12-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.153-175.280Upgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel6.12-tools-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel6.12-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel6.12-debuginfoUpgrade python3-perfUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel6.12-tools | Sep 30, 2025 | Sep 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 19, 2025 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade dtb-amazon | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual | Mar 17, 2026 | Sep 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub