In the Linux kernel, the following vulnerability has been resolved: smb: client: fix NULL ptr deref in crypto_aead_setkey() Neither SMB3.0 or SMB3.02 supports encryption negotiate context, so when …
High CVSS 7.5
Summary
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix NULL ptr deref in crypto_aead_setkey() Neither SMB3.0 or SMB3.02 supports encryption negotiate context, so when SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response, the client uses AES-128-CCM as the default cipher. See MS-SMB2 3.3.5.4. Commit b0abcd65ec54 ("smb: client: fix UAF in async decryption") added a @server->cipher_type check to conditionally call smb3_crypto_aead_allocate(), but that …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/22127c1dc04364cda3da812161e70921e6c3c0af Patch
- https://git.kernel.org/stable/c/44c495818d9c4a741ab9e6bc9203ccc9f55f6f40
- https://git.kernel.org/stable/c/46f8e25926817272ec8d5bfbd003569bdeb9a8c8 Patch
- https://git.kernel.org/stable/c/4a788ebbb10db9da453d52eaf44a41c13dc446df
- https://git.kernel.org/stable/c/4bdec0d1f658f7c98749bd2c5a486e6cfa8565d2 Patch
- https://git.kernel.org/stable/c/92c5b62879073b489793a067dbe8d4f2728cdcad
- https://git.kernel.org/stable/c/9b8904b53b5ace0519c74cd89fc3ca763f3856d4 Patch
Timeline
- nvd_ingest NVD