PT-2022-33615 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.19.1 Description: A memory leak issue was discovered in the smb2 handle negotiate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local privileged (CAP_SYS_ADMIN) attacker to crash the system.

...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:2177-1 Rating: important References: 1055117 1061840 1065729 1103269 1118212 1153274 1154353 1156395 1158266 1167773 1176447 1177282 1178134 1180100 1183405 1188885 1195826 1196426 1196478 1196570...

PT-2025-25864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the SMB2 negotiate function. This issue occurs in cases of failure, such as dialect mismatches, where the...

DEBIAN-CVE-2022-0168

A denial of service DOS issue was found in the Linux kernel’s smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser function. This flaw allows a local, privileged CAPSYSADMIN attacker to crash the system...

Design/Logic Flaw

A denial of service DOS issue was found in the Linux kernel’s smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser function. This flaw allows a local, privileged CAPSYSADMIN attacker to crash the system...

PT-2022-5973 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: A use-after-free issue exists in the Linux kernel's ksmbd module, specifically in the fs/ksmbd/smb2pdu.c file, related to the SMB2 TREE DISCONNECT command. This issue can be...

PT-2022-6038 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: The issue is related to a heap-based buffer overflow in the Linux kernel's ksmbd subsystem, specifically in the set ntacl dacl function. This overflow is connected to the use ...

PT-2022-6039 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: An issue was discovered in ksmbd in the Linux kernel, related to a memory leak due to the omission of a kfree call in certain smb2 handle negotiate error conditions. This can ...

PT-2022-6048 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: The issue is related to the smb2 write function in the ksmbd module of the Linux kernel, which is vulnerable to an out-of-bounds read in memory. This can allow a remote attack...

PT-2022-6040 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: The issue is related to an out-of-bounds read in the Linux kernel's ksmbd subsystem, specifically in the fs/ksmbd/smb2misc.c file. This occurs when handling the SMB2 TREE...

PT-2022-6028

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.15 through 5.18 before 5.18.18 Description The issue is related to a lack of length validation in the smb2 write function in the fs/ksmbd/smb2pdu.c module of the Linux kernel, which can lead to a buffer overflow in...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service DOS issue was found in the Linux kernel smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser...

GSD-2022-1002130 cifs: prevent bad output lengths in smb2_ioctl_query_info()

cifs: prevent bad output lengths in smb2ioctlqueryinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001914 cifs: prevent bad output lengths in smb2_ioctl_query_info()

cifs: prevent bad output lengths in smb2ioctlqueryinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001607 cifs: fix NULL ptr dereference in smb2_ioctl_query_info()

cifs: fix NULL ptr dereference in smb2ioctlqueryinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

PT-2022-29880

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29883

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-30403

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30187

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...