smb/client: zero-initialize stack-allocated cifs_open_info_data
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.111, 6.18, 6.18.53
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 436cfdbc57d98808fce427d9a8d97691374989b3 · fixed in 2c5db82778f560121efda9e052e2f19c2d807c1b; From fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 · fixed in 74ff47e6c4213fcfeba2de448d9cbda200507d22; From 057ac50638bcece64b3b436d3a61b70ed6c01a34 · fixed in 22532dd88694ed20bdd47523ffa709f166ce776b; From 057ac50638bcece64b3b436d3a61b70ed6c01a34 · fixed in 8fce4cf4369c766a3293a05419500cbfde72e60d; From 6.6.113 · fixed in 6.6.160; From 6.12.54 · fixed in 6.12.111; From 6.17.4 · fixed in 6.18
- Linux Linux
6.18
- KernelLinux
fixed in 6.6.160; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53