title: Use-after-free in smb2_is_status_io_timeout()
description: A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service.
problem types: Use After Free
affected:
{
defaultStatus: affected
product: kernel
vendor: n/a
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:6
defaultStatus: unaffected
packageName: kernel
product: Red Hat Enterprise Linux 6
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:7
defaultStatus: unaffected
packageName: kernel
product: Red Hat Enterprise Linux 7
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:7
defaultStatus: unaffected
packageName: kernel-rt
product: Red Hat Enterprise Linux 7
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:8
defaultStatus: affected
packageName: kernel
product: Red Hat Enterprise Linux 8
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:8
defaultStatus: affected
packageName: kernel-rt
product: Red Hat Enterprise Linux 8
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:9
defaultStatus: affected
packageName: kernel
product: Red Hat Enterprise Linux 9
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:9
defaultStatus: affected
packageName: kernel-rt
product: Red Hat Enterprise Linux 9
vendor: Red Hat
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: kernel
product: Fedora
vendor: Fedora
}
metrics:
other: [
content: {'namespace': 'https://access.redhat.com/security/updates/classification/', 'value': 'Low'}
type: Red Hat severity rating
]
workarounds: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.