In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix overflow in dacloffset bounds check
The dacloffset field was originally typed as int and used in an unchecked addition, which could overflow and bypass the existing bounds check in both smb_check_perm_dacl() and smb_inherit_dacl().
This could result in out-of-bounds memory access and a kernel crash when dereferencing the DACL pointer.
This patch converts dacloffset to unsigned int and uses check_add_overflow() to validate access to the DACL.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fde-6.11Upgrade linux-image-azure-nvidia-lts-24.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub