CVE-2025-22043

ksmbd: add bounds check for durable handle context

State: Published
Severity: 8.1 High
Published: Apr 16, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: add bounds check for durable handle context

Add missing bounds check for durable handle context.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before 8d4848c45943c9cf5e86142fd7347efa97f497dbAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 29b946714d6aa77de54c71243bba39469ac43ef2Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 1107b9ed92194603593c51829a3887812ae9e806Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before f0db3d9d416e332a0d6f045a1509539d3a4cd898Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 542027e123fc0bfd61dd59e21ae0ee4ef2101b29Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before 8d4848c45943c9cf5e86142fd7347efa97f497dbAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 29b946714d6aa77de54c71243bba39469ac43ef2Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 1107b9ed92194603593c51829a3887812ae9e806Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before f0db3d9d416e332a0d6f045a1509539d3a4cd898Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 542027e123fc0bfd61dd59e21ae0ee4ef2101b29Affected

LinuxLinux

5.15Affected
before 5.15Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.