CVSS 7.8 · High EPSS 0,36%
Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destroys the file via __ksmbd_close_fd while another thread holds a reference to it. The existing checks on fp->refcount are not sufficient to prevent this. The fix takes ft->lock around the section which removes the file from the file table. This prevents two threads acquiring the same file pointer via __close_file_table_ids, as well as the other functions which retrieve a file from the IDR and which already use this same lock.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 5.15 hingga sebelum 6.6.91 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.29 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.14.7 |
| linux | linux kernel | Versi 6.15 rc1 |
| linux | linux kernel | Versi 6.15 rc2 |
| linux | linux kernel | Versi 6.15 rc3 |
| linux | linux kernel | Versi 6.15 rc4 |
| linux | linux kernel | Versi 6.15 rc5 |