In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix overflow in dacloffset bounds check
The dacloffset field was originally typed as int and used in an unchecked addition, which could overflow and bypass the existing bounds check in both smb_check_perm_dacl() and smb_inherit_dacl().
This could result in out-of-bounds memory access and a kernel crash when dereferencing the DACL pointer.
This patch converts dacloffset to unsigned int and uses check_add_overflow() to validate access to the DACL.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-azure-6.11Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-azure-fde-6.11Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-gke-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gke-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-2032-raspi-realtime | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub