In the Linux kernel, the following vulnerability has been resolved:
ksmbd: prevent out-of-bounds stream writes by validating *pos
ksmbd_vfs_stream_write() did not validate whether the write offset (*pos) was within the bounds of the existing stream data length (v_len). If *pos was greater than or equal to v_len, this could lead to an out-of-bounds memory write.
This patch adds a check to ensure *pos is less than v_len before proceeding. If the condition fails, -EINVAL is returned.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-awsUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-aws-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-generic-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fips | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub