In the Linux kernel, the following vulnerability has been resolved:
ksmbd: transport_ipc: validate payload size before reading handle
handle_response() dereferences the payload as a 4-byte handle without verifying that the declared payload size is at least 4 bytes. A malformed or truncated message from ksmbd.mountd can lead to a 4-byte read past the declared payload size. Validate the size before dereferencing.
This is a minimal fix to guard the initial handle read.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 13, 2025 | Nov 13, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-realtime-6.17Upgrade linux-image-gcpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-6.17Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-awsUpgrade linux-image-gcp-6.17Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.17Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-6.17Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.17.0-1011-oemUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-genericUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracleUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-generic-6.17Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-aws-6.17Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-oracle-6.17Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04 | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub