CVE-2021-46960

cifs: Return correct error code from smb2_get_enc_key

State: Published
Severity: 7.5 High
Published: Feb 27, 2024
Updated: Aug 5, 2026
Reserved: Feb 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: Return correct error code from smb2_get_enc_key

Avoid a warning if the error percolates back up:

[440700.376476] CIFS VFS: \\otters.example.com crypt_message: Could not get encryption key [440700.386947] ------------[ cut here ]------------ [440700.386948] err = 1 [440700.386977] WARNING: CPU: 11 PID: 2733 at /build/linux-hwe-5.4-p6lk6L/linux-hwe-5.4-5.4.0/lib/errseq.c:74 errseq_set+0x5c/0x70 ... [440700.397304] CPU: 11 PID: 2733 Comm: tar Tainted: G OE 5.4.0-70-generic #78~18.04.1-Ubuntu ... [440700.397334] Call Trace: [440700.397346] __filemap_set_wb_err+0x1a/0x70 [440700.397419] cifs_writepages+0x9c7/0xb30 [cifs] [440700.397426] do_writepages+0x4b/0xe0 [440700.397444] __filemap_fdatawrite_range+0xcb/0x100 [440700.397455] filemap_write_and_wait+0x42/0xa0 [440700.397486] cifs_setattr+0x68b/0xf30 [cifs] [440700.397493] notify_change+0x358/0x4a0 [440700.397500] utimes_common+0xe9/0x1c0 [440700.397510] do_utimes+0xc5/0x150 [440700.397520] __x64_sys_utimensat+0x88/0xd0

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before e94851629c49c65b4fbb29a5725ddfd7988f8f20Affected 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before e486f8397f3f14a7cadc166138141fdb14379a54Affected 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before 93f3339b22ba17e66f0808737467b70ba087eaecAffected 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before aaa0faa5c28a91c362352d6b35dc3ed10df56fb0Affected 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before f59a9242942fef0de7b926e438ba4eae65d4b4ddAffected 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before b399c1a3ea0b9d10047ff266d65533df7f15532fAffected 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before 83728cbf366e334301091d5b808add468ab46b27Affected
LinuxLinux	4.11Affected before 4.11Not affected 4.14.233 through 4.14.Not affected 4.19.191 through 4.19.Not affected 5.4.118 through 5.4.Not affected 5.10.36 through 5.10.Not affected 5.11.20 through 5.11.Not affected 5.12.3 through 5.12.Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before e94851629c49c65b4fbb29a5725ddfd7988f8f20Affected
61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before e486f8397f3f14a7cadc166138141fdb14379a54Affected
61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before 93f3339b22ba17e66f0808737467b70ba087eaecAffected
61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before aaa0faa5c28a91c362352d6b35dc3ed10df56fb0Affected
61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before f59a9242942fef0de7b926e438ba4eae65d4b4ddAffected
61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before b399c1a3ea0b9d10047ff266d65533df7f15532fAffected
61cfac6f267dabcf2740a7ec8a0295833b28b5f5 to before 83728cbf366e334301091d5b808add468ab46b27Affected

LinuxLinux

4.11Affected
before 4.11Not affected
4.14.233 through 4.14.*Not affected
4.19.191 through 4.19.*Not affected
5.4.118 through 5.4.*Not affected
5.10.36 through 5.10.*Not affected
5.11.20 through 5.11.*Not affected
5.12.3 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.