CVE-2025-21946

ksmbd: fix out-of-bounds in parse_sec_desc()

published April 1, 2025

CVSS
—
EPSS
0%
Percentile
41.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bounds in parse_sec_desc()

If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd

struct size. If it is smaller, It could cause slab-out-of-bounds.

And when validating sid, It need to check it included subauth array size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00491 · 41.3th percentile
Published
2025-04-01T15:41Z
EPSS history
Timeline
  • 01 APR 15:41Z
    ksmbd: fix out-of-bounds in parse_sec_desc()
    cvelistv5