Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.10.211, 5.15.150, 6.1.69, 6.6.8
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- kernel
From 4.19 · fixed in 5.10.211; From 5.11 · fixed in 5.15.150; From 5.16 · fixed in 6.1.69; From 6.2 · fixed in 6.6.8
- kernel-rt
Version range not reported
- kernel
Version range not reported
- kernel
Version range not reported
- kernel
Version range not reported
- kernel
Version range not reported
- kernel
Version range not reported
- kernel
Version range not reported
- kernel-rt
Version range not reported
- kernel
Version range not reported
- openshift-logging/cluster-logging-operator-bundle
Version range not reported
- openshift-logging/cluster-logging-rhel8-operator
Version range not reported
- openshift-logging/elasticsearch6-rhel8
Version range not reported
- openshift-logging/elasticsearch-operator-bundle
Version range not reported
- openshift-logging/elasticsearch-proxy-rhel8
Version range not reported
- openshift-logging/elasticsearch-rhel8-operator
Version range not reported
- openshift-logging/eventrouter-rhel8
Version range not reported
- openshift-logging/fluentd-rhel8
Version range not reported
- openshift-logging/kibana6-rhel8
Version range not reported
- openshift-logging/log-file-metric-exporter-rhel8
Version range not reported
- openshift-logging/logging-curator5-rhel8
Version range not reported
- openshift-logging/logging-loki-rhel8
Version range not reported
- openshift-logging/logging-view-plugin-rhel8
Version range not reported
- openshift-logging/loki-operator-bundle
Version range not reported
- openshift-logging/loki-rhel8-operator
Version range not reported
- openshift-logging/lokistack-gateway-rhel8
Version range not reported
- openshift-logging/opa-openshift-rhel8
Version range not reported
- openshift-logging/vector-rhel8
Version range not reported
- kernel
Version range not reported
- kernel
Version range not reported
- kernel-rt
Version range not reported
- kernel-rt
Version range not reported