Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xw7x-gch6-cpx7

Опубликовано: 04 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

EPSS

Процентиль: 5%
0.00023
Низкий

7.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.1
ubuntu
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

CVSS3: 7.1
nvd
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

msrc
4 месяца назад

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

CVSS3: 7.1
debian
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: k ...

EPSS

Процентиль: 5%
0.00023
Низкий

7.1 High

CVSS3

Дефекты

CWE-125