In the Linux kernel, the following vulnerability has been resolved:
fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read.
This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL.
The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-coreUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-rt-64k-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade rtlaUpgrade kernel-debugUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules | Jul 8, 2026 | Jul 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.209-147.245Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfo | Jun 23, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 6, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 6, 2026 | May 6, 2026 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade rvUpgrade kernel-debug-modules-extraUpgrade perfUpgrade bpftoolUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernelUpgrade libperfUpgrade kernel-rt-debug-devel | Jul 13, 2026 | Jul 11, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-aws-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-raspi-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-generic-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-virtual-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-aws-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1104-kvm | May 25, 2026 | May 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 22, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub