Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey from client.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c5049d2d73b2dc8e6bb64be633250bad1ae3d9ef to < bd554ed4fdc3d38404a1c43d428432577573e809affectedf9929ef6a2a55f03aac61248c6a3a987b8546f2a to < 30fd6521b2fbd9b767e438e31945e5ea3e3a2fbaaffectedf9929ef6a2a55f03aac61248c6a3a987b8546f2a to < 7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4affectedf9929ef6a2a55f03aac61248c6a3a987b8546f2a to < ecd7e1c562cb08e41957fcd4b0e404de5ab38e20affectedf9929ef6a2a55f03aac61248c6a3a987b8546f2a to < 4b081ce0d830b684fdf967abc3696d1261387254affected
Linux Linux
Default version status: affected
5.17affected0 to < 5.17unaffected6.1.52 to ≤ 6.1.*unaffected6.4.15 to ≤ 6.4.*unaffected6.5.2 to ≤ 6.5.*unaffected6.6 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/bd554ed4fdc3d38404a1c43d428432577573e809 ↗
- https://git.kernel.org/stable/c/30fd6521b2fbd9b767e438e31945e5ea3e3a2fba ↗
- https://git.kernel.org/stable/c/7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4 ↗
- https://git.kernel.org/stable/c/ecd7e1c562cb08e41957fcd4b0e404de5ab38e20 ↗
- https://git.kernel.org/stable/c/4b081ce0d830b684fdf967abc3696d1261387254 ↗