CVE-2025-21748

ksmbd: fix integer overflows on 32 bit systems

published February 27, 2025

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix integer overflows on 32 bit systems

On 32bit systems the addition operations in ipc_msg_alloc() can

potentially overflow leading to memory corruption.

Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00606 · 48.3th percentile
Published
2025-02-27T02:12Z
EPSS history
Timeline
  • 27 FEB 02:12Z
    ksmbd: fix integer overflows on 32 bit systems
    cvelistv5