CVE-2026-45972: linux kernel 6.19; +6 more affected products

Affected technology

linux kernel · from 6.1.163 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.6.124 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.12.70 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.18.10 (inclusive), before 6.18.14 (exclusive)
linux

linux kernel · from 6.19.1 (inclusive), before 6.19.4 (exclusive)
linux

linux kernel · 6.19
linux

Linux · 743f70406264348c0830f38409eb6c40a42fb2db to before 96e53bb3ee2f354cf6b4ab07bcc56e500f8b3f74, 3a6d6b332f92990958602c1e35ce0173e2dd62e9 to before 7425453ea16dbc3bbb0f6cac4d60b537e5e4d151, b64e3b5d8d759dd4333992e4ba4dadf9359952c8 to before 4d339b219004869e96c4ce56b8891f83a38da4c0, 9ee608a64e37cea5b4b13e436c559dd0fb2ad1b5 to before e66dcf7bb9c4df5582c82bc3582725abcbfbea73, e3a43633023e3cacaca60d4b8972d084a2b06236 to before 639deb962986ef2f5e2a6d5a600c66f922471e81, e3a43633023e3cacaca60d4b8972d084a2b06236 to before ebbbc4bfad4cb355d17c671223d0814ee3ef4eda, 6.1.163 to before 6.1.165, 6.6.124 to before 6.6.128, 6.12.70 to before 6.12.75, 6.18.10 to before 6.18.14
Linux

Linux · 6.19
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: fs/smb/client/smb2file.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.