Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_neg is set to false. This patch ignore smb1 packets after ->need_neg is set to false.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 51a8534c0f35c0401e45f1055f914729cad98bf9 before 5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b; affected 0b3ec5671ac06829ccebdaeec05acedfec327f42 before 330d900620dfc9893011d725b3620cd2ee0bc2bc; affected 39b291b86b5988bf8753c3874d5c773399d09b96 before aa669ef229ae8dd779da9caa24e254964545895f; affected 39b291b86b5988bf8753c3874d5c773399d09b96 before 536bb492d39bb6c080c92f31e8a55fe9934f452b; affected cc32cd98a0aee4cc3eb611cbce11795b1aaa738a; affected 5.15.105 before 5.15.145; affected 6.1.22 before 6.1.53; affected 6.2.9 before 6.3 |
| Linux / Linux | affected 6.3; unaffected 0 before 6.3; unaffected 5.15.145 through 5.15.*; unaffected 6.1.53 through 6.1.*; unaffected 6.4.16 through 6.4.*; unaffected 6.5 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b
- https://git.kernel.org/stable/c/330d900620dfc9893011d725b3620cd2ee0bc2bc
- https://git.kernel.org/stable/c/aa669ef229ae8dd779da9caa24e254964545895f
- https://git.kernel.org/stable/c/536bb492d39bb6c080c92f31e8a55fe9934f452b
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.