Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-57925

ksmbd: fix a missing return value check bug

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to allocate a node, it returns a NULL pointer to the in_work pointer. This can lead to an illegal memory write of in_work->response_buf when allocate_interim_rsp_buf() attempts to perform a kzalloc() on it. To address this issue, incorporating a check for the return value of ksmbd_alloc_work_struct() ensures that the function returns immediately upon allocation failure, thereby preventing the aforementioned illegal memory access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6f0207218c4c125f5bf32055ac4220b4ef3b7e67 to < 781c743e18bfd9b7dc0383f036ae952bd1486f21affected
  • f8cf1ebb7de62c7d807707ce4abb69d483629263 to < ee7e40f7fb17f08a8cbae50553e5c2e10ae32fceaffected
  • 041bba4414cda37d00063952c9bff9c3d5812a19 to < 271ae0edbfc942795c162e6cf20d2bc02bd7fde4affected
  • 041bba4414cda37d00063952c9bff9c3d5812a19 to < 2976e91a3e569cf2c92c9f71512c0ab1312fe965affected
  • 041bba4414cda37d00063952c9bff9c3d5812a19 to < 4c16e1cadcbcaf3c82d5fc310fbd34d0f5d0db7caffected
  • 5.15.145 to < 5.15.177affected
  • 6.1.71 to < 6.1.125affected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 5.15.177 to ≤ 5.15.*unaffected
  • 6.1.125 to ≤ 6.1.*unaffected
  • 6.6.72 to ≤ 6.6.*unaffected
  • 6.12.10 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References