Описание
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Отчет
Red Hat rates this vulnerability as Moderate impact because exploiting it requires local privileges to mount network filesystems, restricting the threat scope to authenticated users and limiting the consequence to denial of service without compromising host data confidentiality or integrity. CIFS shares are not mounted by default, and unprivileged users typically lack the permissions necessary to supply custom filesystem parameters. Consequently, typical enterprise installations are exposed only if untrusted local users have delegated mount capabilities or containerized administrative privileges.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 10 | kernel | Fixed | RHSA-2025:8374 | 02.06.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:8142 | 26.05.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:8142 | 26.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.
cifs: Fix integer overflow while processing acregmax mount option
In the Linux kernel, the following vulnerability has been resolved: c ...
EPSS
5.5 Medium
CVSS3