Description
Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | fai-kernels | 1.17+etch.13etch5 | DSA-1428-1 |
| Debian 4.0 | linux-2.6 | 2.6.18.dfsg.1-13etch5 | DSA-1428-1 |
| Debian 4.0 | user-mode-linux | 2.6.18-1um-2etch.13etch5 | DSA-1428-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-53.1.6.el5 | RHSA-2008:0089 |
| RHEL 4 | kernel +10 | 2.6.9-67.0.7.EL | RHSA-2008:0167 |
Advisories 3
- RHSA-2008:0089 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0167 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1428-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20080208 rPSA-2008-0048-1 kernel mailing-list
- SUSE-SA:2008:017 vendor-advisory
- 26438 vdb-entry
- 28643 third-party-advisory
- oval:org.mitre.oval:def:9901 vdb-entry signature
- USN-618-1 vendor-advisory
- 28826 third-party-advisory
- SUSE-SA:2008:013 vendor-advisory
- 29387 third-party-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048
- DSA-1428 vendor-advisory
- 27912 third-party-advisory
- SUSE-SA:2007:063 vendor-advisory
- 29245 third-party-advisory
- RHSA-2008:0167 vendor-advisory
- SUSE-SA:2007:064 vendor-advisory
- [linux-kernel] 20071108 Buffer overflow in CIFS VFS. mailing-list
- 1019612 vdb-entry
- 27666 third-party-advisory
- ADV-2007-3860 vdb-entry
- 30769 third-party-advisory
- RHSA-2008:0089 vendor-advisory
- [linux-kernel] 20071109 Re: Fw: Buffer overflow in CIFS VFS. mailing-list
- http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commitdiff%3Bh=133672efbc1085f9af990bdc145e1822ea93bcf3
- SUSE-SA:2008:030 vendor-advisory
- 27888 third-party-advisory
- 29570 third-party-advisory
- 30818 third-party-advisory
- kernel-cifsvfs-sendreceive-bo(38450) vdb-entry