ksmbd: validate SID in parent security descriptor during ACL inheritance
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.92, 6.18.34, 7.0.11
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb_ntsd) retrieved from the parent directory.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in 8efbea0253b7fa2d1960cab0fed36544ca0b41ab; From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in f0e5c9c663badc9982e6941322eef1cb17de0f11; From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in 18d8db24b0a5b7be4829238dd4022236df02d421; From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in 1c9d0646a9959752f11ca1080dc1ff26bd1756cb; From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in 69f030cf95488ae1186c72ac8c66fd279664ea7f
- Linux Linux
5.15
- KernelLinux
From 5.15.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.92; From 6.13.0 · fixed in 6.18.34; From 6.19.0 · fixed in 7.0.11