Linux Kernel "SMB2_tcon ()" null pointer indirectly references DoS Vulnerability

Linux Kernel "SMB2_tcon ()" null pointer indirectly references DoS Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel
Description:
CVE (CAN) ID: CVE-2014-7145

Linux Kernel is the Kernel of the Linux operating system.

Linux Kernel 3.16.3, 3.14.19, 3.10.55 and earlier versions have the NULL pointer indirect reference vulnerability in the implementation of the "SMB2_tcon ()" function (fs/cifs/smb2pdu. c), which can cause a crash.

<* Source: Raphael Geissert (atomo64@gmail.com)
*>

Suggestion:
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3
Https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.19
Https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.55

The Ubuntu 13.10 (Saucy Salamander) Kernel has been upgraded to Linux Kernel 3.10 RC5

Linux Kernel 3.4.62 LTS is now available for download

How to install Linux kernel 13.10 On Ubuntu 3.12

Linux Kernel: click here
Linux Kernel: click here

This article permanently updates the link address: