In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix races in cifsd thread creation
The cifsd demultiplex thread can run and access tcp_ses before the parent thread has finished populating tcp_ses, which the worker thread accesses locklessly.
Also, the kthread_run macro may start the thread before returning the thread pointer. Because the pointer is part of the structure that the thread can access, if the kernel is preempted after the thread is spawned, but before the thread pointer is populated and the thread attempts to exit, it will sleep, waiting for a SIGKILL signal.
Fix this by moving creation of the thread to after all of tcp_ses'es fields are populated, and spawning the thread last, using a split kthread_create/wake_up_process logic.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-develUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-headersUpgrade kernel6.12Upgrade bpftool6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.12.111-136.204Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfo | Oct 13, 2026 | Sep 24, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Sep 30, 2026 | Sep 24, 2026 |
| Redhat_linux | — | No solution exists | Sep 30, 2026 | Sep 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Sep 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub