In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix overflow in dacloffset bounds check
The dacloffset field was originally typed as int and used in an unchecked addition, which could overflow and bypass the existing bounds check in both smb_check_perm_dacl() and smb_inherit_dacl().
This could result in out-of-bounds memory access and a kernel crash when dereferencing the DACL pointer.
This patch converts dacloffset to unsigned int and uses check_add_overflow() to validate access to the DACL.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-gke-64kUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fde-6.11Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub