In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
| Vendor | Product | Versions |
|---|---|---|
| linux | linux_kernel | f1d662a7d5e5322e583aad6b3cfec03d8f27b435, f1d662a7d5e5322e583aad6b3cfec03d8f27b435, f1d662a7d5e5322e583aad6b3cfec03d8f27b435, f1d662a7d5e5322e583aad6b3cfec03d8f27b435, f1d662a7d5e5322e583aad6b3cfec03d8f27b435, f1d662a7d5e5322e583aad6b3cfec03d8f27b435, f1d662a7d5e5322e583aad6b3cfec03d8f27b435, f1d662a7d5e5322e583aad6b3cfec03d8f27b435, 2.6.24 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| linux | linux | mitre_affected | 90% |
| open source | open source linux kernel | cert_advisory | 90% |
Updated description with critical vulnerability details, changed severity to CRITICAL, and added affected version 7.1-rc4.
Updated description with technical details, added affected versions, changed severity to HIGH, added CWE-20, and marked exploit as available and actively exploited.
Initial creation
