RLSA-2025:16904 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs: export anoninodemakesecureinode and fix secretmem LSM bypass CVE-2025-38396 kernel: smb: client: fix use-after-free in cifsoplockbreak CVE-2025-38527 kernel: cifs: Fix the smbdrespons...

EUVD-2017-0632

Malware in sbrugna...

EUVD-2017-15781

Malware in sbrugna...

EUVD-2017-0636

Malware in sbrugna...

EUVD-2018-20080

Malware in sbrugna...

EUVD-2017-0628

Malware in sbrugna...

EUVD-2017-0629

Malware in sbrugna...

EUVD-2017-0635

Malware in sbrugna...

EUVD-2019-10253

Malware in sbrugna...

EUVD-2017-0633

Malware in sbrugna...

EUVD-2019-10261

Malware in sbrugna...

EUVD-2019-1542

Malware in sbrugna...

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

...

SUSE CVE-2025-39932

In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbddestroy call disableworksync&info-postsendcreditswork In smbddestroy we may destroy the memory so we better wait until postsendcreditswork is no longer pending and will never be started again. I actually just...

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

...

smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

...

AZL-75327 CVE-2025-39932 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbddestroy call disableworksync&info-postsendcreditswork In smbddestroy we may destroy the memory so we better wait until postsendcreditswork is no longer pending and will never be started again. I actually just...

CVE-2025-39932 smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbddestroy call disableworksync&info-postsendcreditswork In smbddestroy we may destroy the memory so we better wait until postsendcreditswork is no longer pending and will never be started again. I actually just...

CVE-2025-39932

CVE-2025-39932 concerns the Linux kernel SMB client path where in smbd_destroy() a memory may be destroyed while post_send_credits_work could still be pending, potentially causing a use-after-free scenario illustrated by rdma_rxe/ib_drain_qp flows. The issue arises when put_receive_buffer() trigg...

CVE-2025-39929 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirectrecvio leak in smbdnegotiate error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on kmemcacheshutdown...