CVE-2025-37947

ksmbd: prevent out-of-bounds stream writes by validating *pos

High · published May 20, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent out-of-bounds stream writes by validating *pos

ksmbd_vfs_stream_write() did not validate whether the write offset

(*pos) was within the bounds of the existing stream data length (v_len).

If *pos was greater than or equal to v_len, this could lead to an

out-of-bounds memory write.

This patch adds a check to ensure *pos is less than v_len before

proceeding. If the condition fails, -EINVAL is returned.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Published
2025-05-20T16:01Z
EPSS history
Timeline
  • 20 MAY 16:01Z
    ksmbd: prevent out-of-bounds stream writes by validating *pos
    cvelistv5