In the Linux kernel, the following vulnerability has been resolved:
cifs: prevent NULL pointer dereference in UTF16 conversion
There can be a NULL pointer dereference bug here. NULL is passed to __cifs_sfu_make_node without checks, which passes it unchecked to cifs_strndup_to_utf16, which in turn passes it to cifs_local_to_utf16_bytes where '*from' is dereferenced, causing a crash.
This patch adds a check for NULL 'src' in cifs_strndup_to_utf16 and returns NULL early to prevent dereferencing NULL pointer.
Found by Linux Verification Center (linuxtesting.org) with SVACE
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade bpftoolUpgrade perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.153-175.280Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-libbpf-develUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.155-176.282Upgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-develUpgrade kernel-debuginfoUpgrade kernel6.12-toolsUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade kernel-tools-debuginfo | Sep 30, 2025 | Sep 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 19, 2025 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kb | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-106-fips | Mar 17, 2026 | Sep 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub