tocsin

Debian/linux-6.12: high 8.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir cifs_filldir() copies the entry name out of an SMB1 TRANS

Action: Upgrade linux-6.12 to 6.12.111-1~deb12u1 or later.

Affected

introducedfixedlast affected
06.12.111-1~deb12u1-

Fixed versions

6.12.111-1~deb12u1

Sources

published · modified · JSON