exploitDog

CVE-2025-21994

Опубликовано: 02 апр. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix incorrect validation for num_aces field of smb_acl

parse_dcal() validate num_aces to allocate posix_ace_state_array.

if (num_aces > ULONG_MAX / sizeof(struct smb_ace *))

It is an incorrect validation that we can create an array of size ULONG_MAX. smb_acl has ->size field to calculate actual number of aces in request buffer size. Use this to check invalid num_aces.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15 (включая) до 5.15.180 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.132 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.85 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.21 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.13.9 (исключая)

cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00024

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2025-21994

CVSS3: 5.5

ubuntu

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix incorrect validation for num_aces field of smb_acl parse_dcal() validate num_aces to allocate posix_ace_state_array. if (num_aces > ULONG_MAX / sizeof(struct smb_ace *)) It is an incorrect validation that we can create an array of size ULONG_MAX. smb_acl has ->size field to calculate actual number of aces in request buffer size. Use this to check invalid num_aces.

CVE-2025-21994

CVSS3: 5.5

redhat

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix incorrect validation for num_aces field of smb_acl parse_dcal() validate num_aces to allocate posix_ace_state_array. if (num_aces > ULONG_MAX / sizeof(struct smb_ace *)) It is an incorrect validation that we can create an array of size ULONG_MAX. smb_acl has ->size field to calculate actual number of aces in request buffer size. Use this to check invalid num_aces.

CVE-2025-21994

CVSS3: 5.5

debian

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: k ...

GHSA-pcv3-r2v8-4964

CVSS3: 5.5

github

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix incorrect validation for num_aces field of smb_acl parse_dcal() validate num_aces to allocate posix_ace_state_array. if (num_aces > ULONG_MAX / sizeof(struct smb_ace *)) It is an incorrect validation that we can create an array of size ULONG_MAX. smb_acl has ->size field to calculate actual number of aces in request buffer size. Use this to check invalid num_aces.

BDU:2025-12314

CVSS3: 5.5

fstec

9 месяцев назад

Уязвимость компонента ksmbd ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 5%

0.00024

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo