CVE-2025-21946
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/04/2025
Last modified:
01/04/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ksmbd: fix out-of-bounds in parse_sec_desc()<br />
<br />
If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd<br />
struct size. If it is smaller, It could cause slab-out-of-bounds.<br />
And when validating sid, It need to check it included subauth array size.