REDHAT-BUG-2393527: Medium severity linux/kernel vulnerability

Published Sep 5, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix oops due to uninitialised variable

Fix smb3inittransformrq() to initialise buffer to NULL before calling netfsallocfolioqbuffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.

Affected Software

1 affected component

linux/kernel

Event History

Sep 5, 2025

Data Sourced

via Red Hat·06:04 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2393527?

The severity of REDHAT-BUG-2393527 is considered moderate due to potential risk of system instability.

How do I fix REDHAT-BUG-2393527?

To fix REDHAT-BUG-2393527, ensure that the kernel is updated to the latest version that includes the patch for this issue.

What software is affected by REDHAT-BUG-2393527?

REDHAT-BUG-2393527 affects the Linux kernel where the CIFS filesystem component is utilized.

What does REDHAT-BUG-2393527 address?

REDHAT-BUG-2393527 addresses a software bug that can cause a system crash due to an uninitialized variable in the CIFS implementation.

Is REDHAT-BUG-2393527 a zero-day vulnerability?

No, REDHAT-BUG-2393527 is not a zero-day vulnerability as it has been publicly acknowledged and addressed.