Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7gp2-6wc7-fw9f

Опубликовано: 08 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname

TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname

TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

EPSS

Процентиль: 35%
0.00415
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

CVSS3: 7.1
redhat
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

CVSS3: 9.8
nvd
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

CVSS3: 9.8
debian
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: c ...

CVSS3: 8.8
fstec
больше 3 лет назад

Уязвимость модулей fs/cifs/cifs_debug.c, fs/cifs/cifs_debug.h, fs/cifs/connect.c, fs/cifs/sess.c файловой системы CIFS ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 35%
0.00415
Низкий

9.8 Critical

CVSS3