NetSight
IP …
high8.3

CVE-2025-22038

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_auth[psid->nu…

Impact

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_auth[psid->num_subauth - 1] without checking if num_subauth is non-zero leads to an out-of-bounds read. This patch adds a validation step to ensure num_subauth != 0 before sub_auth is accessed.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 6.1.134
from 6.2 before 6.6.87
from 6.7 before 6.12.23
from 6.13 before 6.13.11
from 6.14 before 6.14.2

Weakness classification

CWE-125

References