cifs: Fix lost destroy smbd connection when MR allocate failed (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 10 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leaked. Let's set the smb direct connection info to the server before call smbd_destroy().
References
- https://git.kernel.org/stable/c/d303e25887127364a6765eaf7ac68aa2bac518a9
- https://git.kernel.org/stable/c/324c0c34fff1affd436e509325cb46739209704e
- https://git.kernel.org/stable/c/caac205e0d5b44c4c23a10c6c0976d50ebe16ac2
- https://git.kernel.org/stable/c/46cd6c639cddba2bd2d810ceb16bb20374ad75b0
- https://git.kernel.org/stable/c/c51ae01104b318bf15f3c5097faba5c72addba7a
- https://git.kernel.org/stable/c/04b7e13b8a13264282f874db5378fc3d3253cfac
- https://git.kernel.org/stable/c/e9d3401d95d62a9531082cd2453ed42f2740e3fd
European references
- ENISA EUVD · EUVD-2023-60381
- GCVE · GCVE-0-2023-54260
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected c7398583340a6d82b8bb7f7f21edcde27dc6a898 < d303e25887127364a6765eaf7ac68aa2bac518a9 ; affected c7398583340a6d82b8bb7f7f21edcde27dc6a898 < 324c0c34fff1affd436e509325cb46739209704e ; affected c7398583340a6d82b8bb7f7f21edcde27dc6a898 < caac205e0d5b44c4c23a10c6c0976d50ebe16ac2 ; affected c7398583340a6d82b8bb7f7f21edcde27dc6a898 < 46cd6c639cddba2bd2d810ceb16bb20374ad75b0 ; affected c7398583340a6d82b8bb7f7f21edcde27dc6a898 < c51ae01104b318bf15f3c5097faba5c72addba7a ; affected c7398583340a6d82b8bb7f7f21edcde27dc6a898 < 04b7e13b8a13264282f874db5378fc3d3253cfac |
| Linux · Linux | affected 4.16 ; unaffected 0 < 4.16 ; unaffected 4.19.276 ≤ 4.19.* ; unaffected 5.4.235 ≤ 5.4.* ; unaffected 5.10.173 ≤ 5.10.* ; unaffected 5.15.99 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |