Riskcovery

CVE-2025-21946

ksmbd: fix out-of-bounds in parse_sec_desc()

State
Published
Severity
8.8 High
Published
Apr 1, 2025
Updated
Aug 5, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bounds in parse_sec_desc()

If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it included subauth array size.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before f4ee19528664777af8b842f8f001be98345aa973Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before c1569dbbe2d43041be9f3fef7ca08bec3b66ad1bAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 159d059cbcb0e6d0e7a7b34af3862ba09a6b22d1Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 6a9831180d0b23b5c97e2bd841aefc8f82900172Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before d6e13e19063db24f94b690159d0633aaf72a0f03Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.160 through 6.1.*Not affected
  • 6.6.83 through 6.6.*Not affected
  • 6.12.19 through 6.12.*Not affected
  • 6.13.7 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.