References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()

There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request
from client. ksmbd find next smb2_ea_info using ->NextEntryOffset of
current smb2_ea_info. ksmbd need to validate buffer length Before
accessing the next ea. ksmbd should check buffer length using buf_len,
not next variable. next is the start offset of current ea that got from
previous ea.

https://git.kernel.org/stable/c/4bf629262f9118ee91b1c3a518ebf2b3bcb22180

https://git.kernel.org/stable/c/79ed288cef201f1f212dfb934bcaac75572fb8f6

https://git.kernel.org/stable/c/aeb974907642be095e38ecb1a400ca583958b2b0

https://git.kernel.org/stable/c/f339d76a3a972601d0738b881b099d49ebbdc3a2