NetSight
IP …
high7.5

CVE-2025-21844

In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the re…

Impact

In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return value of cifs_buf_get() and cifs_small_buf_get() in receive_encrypted_standard() to prevent null pointer dereference.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.1.69 before 6.1.130
from 6.6.8 before 6.6.80
from 6.7 before 6.12.17
from 6.13 before 6.13.5
Versions 5.10.211, 5.15.150

Weakness classification

CWE-476

References