CVE-2022-47941, CVE-2022-47942, CVE-2022-47938, CVE-2022-47939, CVE-2022-47940. Vulnerabilities affecting the ksmb module in the Linux kernel versions 5.14 through 5.15.61. (BSA-2022-2157).

Security Advisory ID: BSA-2022-2157 Component: ksmbd module in the Linux kernel Revision: 2.1 Brocade PSIRT has become aware of several vulnerabilities affecting theksmbdmodule in the Linux kernel published by Trend Micro Zero Day Initiative. ZDI-22-1687 - CVSS SCORE: 5.3 - CVE-2022-47941...

PT-2022-5973 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: A use-after-free issue exists in the Linux kernel's ksmbd module, specifically in the fs/ksmbd/smb2pdu.c file, related to the SMB2 TREE DISCONNECT command. This issue can be...

PT-2022-6607

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to incorrect resource release when handling TCP connections in the ksmbd module of the Linux kernel. This can be exploited by a remote attacker to cause a...

PT-2022-6039 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: An issue was discovered in ksmbd in the Linux kernel, related to a memory leak due to the omission of a kfree call in certain smb2 handle negotiate error conditions. This can ...

PT-2022-6048 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: The issue is related to the smb2 write function in the ksmbd module of the Linux kernel, which is vulnerable to an out-of-bounds read in memory. This can allow a remote attack...

PT-2022-6028

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.15 through 5.18 before 5.18.18 Description The issue is related to a lack of length validation in the smb2 write function in the fs/ksmbd/smb2pdu.c module of the Linux kernel, which can lead to a buffer overflow in...