In the Linux kernel, the following vulnerability has been resolved:
smb/client: fix out-of-bounds read in symlink_data()
Since smb2_check_message() returns success without length validation for the symlink error response, in symlink_data() it is possible for iov->iov_len to be smaller than sizeof(struct smb2_err_rsp). If the buffer only contains the base SMB2 header (64 bytes), accessing err->ErrorContextCount (at offset 66) or err->ByteCount later in symlink_data() will cause an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-toolsUpgrade kernel6.18Upgrade bpftool6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-livepatch-6.18.30-61.116Upgrade perf6.18Upgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade python3-perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-develUpgrade bpftool6.18Upgrade python3-perf6.18-debuginfo | Jun 23, 2026 | May 28, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 17, 2026 | May 28, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modulesUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-s390x | Aug 24, 2026 | Aug 21, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-6.8.0-134-genericUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.17.0-40-generic-64kUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-generic-6.17Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-6.17.0-1017-realtimeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-6.17Upgrade linux-image-generic-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1019-awsUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.17.0-1021-raspiUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeopUpgrade linux-image-xilinxUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-6.17.0-1020-gcpUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.17.0-1019-aws-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-7.0Upgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-aws-6.17Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-6.17.0-40-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.17.0-1018-oracle-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-virtual-6.8Upgrade linux-image-6.17.0-1018-oracleUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-20.04Upgrade linux-image-oem-6.17Upgrade linux-image-oem-22.04bUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fde-6.17Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-7.0.0-1008-awsUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-7.0Upgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-6.17.0-1028-oemUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.17.0-1020-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-aws-lts-24.04Upgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-6.17.0-1026-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04cUpgrade linux-image-kvmUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-6.17.0-1026-nvidia-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-7.0Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-raspi-6.17Upgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-realtime-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.17Upgrade linux-image-laptop-23.10Upgrade linux-image-azure-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8 | Jul 1, 2026 | May 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub