Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: smb: client: Handle kstrdup failures for passwords In smb3_reconfigure(), after duplicating ctx->password and ctx->password2 with kstrdup(), we need to check for allocation failures. If ses->password allocation fails, return -ENOMEM. If ses->password2 allocation fails, free ses->password, set it to NULL, and return -ENOMEM.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7e8cffa4f85e6839335d75e6b47f918d90c1d194 before 35dbac8c328d6afe937cd45ecd41d209d0b9f8b8; affected c1eb537bf4560b3ad4df606c266c665624f3b502 before 35488799b0ab6e4327f82e1d9209a60805665b37; affected c1eb537bf4560b3ad4df606c266c665624f3b502 before 9a5dd61151399ad5a5d69aad28ab164734c1e3bc; affected e78308a6dcab1e53b38b8dd952e69c515cd324d7; affected 2a0fc63f1f4fccfeb367d0c57b8a243cec60c26c; affected 6.6.24 before 6.6.59; affected 6.7.12 before 6.8; affected 6.8.3 before 6.9 |
| Linux / Linux | affected 6.9; unaffected 0 before 6.9; unaffected 6.6.59 through 6.6.*; unaffected 6.11.6 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.