In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential UAF in smb2_close_cached_fid()
find_or_create_cached_dir() could grab a new reference after kref_put() had seen the refcount drop to zero but before cfid_list_lock is acquired in smb2_close_cached_fid(), leading to use-after-free.
Switch to kref_put_lock() so cfid_release() is called with cfid_list_lock held, closing that gap.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel6.12-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel6.12-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade perf6.12Upgrade kernel-livepatch-6.1.163-186.299Upgrade kernel-toolsUpgrade kernel-livepatch-6.12.58-82.121Upgrade python3-perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel6.12-libbpf-staticUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-tools-develUpgrade kernel-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extra-commonUpgrade perfUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extraUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade bpftool6.12 | Mar 9, 2026 | Dec 9, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 15, 2026 | Dec 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-fipsUpgrade linux-image-raspi-6.17Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-xilinxUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-oracle-6.17Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-virtual-6.17Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gke-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-aws-6.17Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-realtime-6.17Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-6.17Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-intel-iotg | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub