In the Linux kernel, the following vulnerability has been resolved:
smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
The logic off managing recv credits by counting posted recv_io and granted credits is racy.
That's because the peer might already consumed a credit, but between receiving the incoming recv at the hardware and processing the completion in the 'recv_done' functions we likely have a window where we grant credits, which don't really exist.
So we better have a decicated counter for the available credits, which will be incremented when we posted new recv buffers and drained when we grant the credits to the peer.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | Apr 24, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade rvUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extra-matchedUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-modules-core | Sep 18, 2026 | Sep 16, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub