Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it included subauth array size.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < f4ee19528664777af8b842f8f001be98345aa973affected0626e6641f6b467447c81dd7678a69c66f7746cf to < c1569dbbe2d43041be9f3fef7ca08bec3b66ad1baffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 159d059cbcb0e6d0e7a7b34af3862ba09a6b22d1affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 6a9831180d0b23b5c97e2bd841aefc8f82900172affected0626e6641f6b467447c81dd7678a69c66f7746cf to < d6e13e19063db24f94b690159d0633aaf72a0f03affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.160 to ≤ 6.1.*unaffected6.6.83 to ≤ 6.6.*unaffected6.12.19 to ≤ 6.12.*unaffected6.13.7 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f4ee19528664777af8b842f8f001be98345aa973 ↗
- https://git.kernel.org/stable/c/c1569dbbe2d43041be9f3fef7ca08bec3b66ad1b ↗
- https://git.kernel.org/stable/c/159d059cbcb0e6d0e7a7b34af3862ba09a6b22d1 ↗
- https://git.kernel.org/stable/c/6a9831180d0b23b5c97e2bd841aefc8f82900172 ↗
- https://git.kernel.org/stable/c/d6e13e19063db24f94b690159d0633aaf72a0f03 ↗