Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to ->Buffer offset to validate buffer length.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < 480469f145e5abf83361e608734e421b7d99693daffected0626e6641f6b467447c81dd7678a69c66f7746cf to < ad6480c9a5d884e2704adc51d69895d93339176caffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 39bdc4197acf2ed13269167ccf093ee28cfa2a4eaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 2dcda336b6e80b72d58d30d40f2fad9724e5fe63affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 0c5541b4c980626fa3cab16ba1a451757778bbb5affected0626e6641f6b467447c81dd7678a69c66f7746cf to < c6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753daaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected5.15.181 to ≤ 5.15.*unaffected6.1.119 to ≤ 6.1.*unaffected6.6.32 to ≤ 6.6.*unaffected6.7.12 to ≤ 6.7.*unaffected6.8.3 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/480469f145e5abf83361e608734e421b7d99693d ↗
- https://git.kernel.org/stable/c/ad6480c9a5d884e2704adc51d69895d93339176c ↗
- https://git.kernel.org/stable/c/39bdc4197acf2ed13269167ccf093ee28cfa2a4e ↗
- https://git.kernel.org/stable/c/2dcda336b6e80b72d58d30d40f2fad9724e5fe63 ↗
- https://git.kernel.org/stable/c/0c5541b4c980626fa3cab16ba1a451757778bbb5 ↗
- https://git.kernel.org/stable/c/c6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753da ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗