The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2011 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-smpUpgrade kernel-ec2Upgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-vmi-develUpgrade kernel-traceUpgrade preload-kmp-defaultUpgrade kernel-desktop-develUpgrade kernel-paeUpgrade kernel-vanilla-develUpgrade kernel-pae-baseUpgrade kernel-desktop-baseUpgrade kernel-pae-develUpgrade kernel-debug-baseUpgrade kernel-xenpaeUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-vanilla-baseUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-kdumppaeUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-ec2-baseUpgrade kernel-vmiUpgrade preload-kmp-desktopUpgrade kernel-develUpgrade kernel-iseries64Upgrade kernel-vanillaUpgrade kernel-ec2-extraUpgrade kernel-vmipaeUpgrade kernel-ppc64Upgrade kernel-vmi-baseUpgrade kernel-trace-develUpgrade kernel-kdumpUpgrade kernel-xen-base | Feb 17, 2015 | May 24, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-33-preempt | Nov 8, 2024 | May 24, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | May 24, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub