Riskcovery

CVE-2025-21748

ksmbd: fix integer overflows on 32 bit systems

State
Published
Severity
9.8 Critical
Published
Feb 27, 2025
Updated
Aug 5, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix integer overflows on 32 bit systems

On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before f3b9fb2764591d792d160f375851013665a9e820Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 760568c1f62ea874e8fb492f9cfa4f47b4b8391eAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 82f59d64e6297f270311b16b5dcf65be406d1ea3Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before b4b902737746c490258de5cb55cab39e79927a67Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before ecb9947fa7c99a77b04d43404c6988a0d326e4a0Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before aab98e2dbd648510f8f51b83fbf4721206ccae45Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.179 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.78 through 6.6.*Not affected
  • 6.12.14 through 6.12.*Not affected
  • 6.13.3 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.