Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's SMB client has been addressed. The issue arose in the 'smbdirect_send_batch' processing, where requests could be sent without the 'IB_SEND_SIGNALED' flag. This omission would lead to problems when the final request, which did have the flag set, was processed. If the connection was interrupted, all requests would be signaled, even those without explicit acknowledgment. The vulnerability could cause 'use-after-free' issues by improperly managing the memory of sibling requests.
The vulnerability could lead to 'use-after-free' errors, causing memory management issues that could be exploited.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel's official website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.