4 matches found
CVE-2024-57925
CVE-2024-57925 affects the Linux kernel’s ksmbd component. A NULL pointer returned by ksmbd_alloc_work_struct() in smb2_send_interim_resp() could allow an illegal memory write to in_work->response_buf during kzalloc() on the in_work structure. The connected documents confirm a fix that adds a ...
CVE-2024-57925: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2sendinterimresp, if ksmbdallocworkstruct fails to allocate a node, it returns a NULL pointer to the inwork pointer. This can lead to an illegal memory write of...
PT-2025-3650
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A missing return value check bug in the ksmbd module has been resolved. The issue occurs in the smb2 send interim resp function when ksmbd alloc work struct fails to allocate a node, returning ...