CVE-2024-57925

HIGH EPSS 10.3%
Published Jan 19, 20251y ago · Modified Jun 17, 20261w ago
7.1 CVSS 3.1
High
Find Similar
Published Jan 19, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to allocate a node, it returns a NULL pointer to the in_work pointer. This can lead to an illegal memory write of in_work->response_buf when allocate_interim_rsp_buf() attempts to perform a kzalloc() on it. To address this issue, incorporating a check for the return value of ksmbd_alloc_work_struct() ensures that the function returns immediately upon allocation failure, thereby preventing the aforementioned illegal memory access.

CVSS Details

Base Score
7.1
Exploitability
1.8
Impact
5.2
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
10.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 10

VendorProductVersionRange
linuxlinux_kernel*≥5.15.145  –  <5.16
linuxlinux_kernel*≥6.1.71  –  <6.1.125
linuxlinux_kernel*≥6.6  –  <6.6.72
linuxlinux_kernel*≥6.7  –  <6.12.10
linuxlinux_kernel6.13any
linuxlinux_kernel6.13any
linuxlinux_kernel6.13any
linuxlinux_kernel6.13any
linuxlinux_kernel6.13any
linuxlinux_kernel6.13any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/271ae0edbfc942795c162e6cf20d2bc02bd7fde4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2976e91a3e569cf2c92c9f71512c0ab1312fe965
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4c16e1cadcbcaf3c82d5fc310fbd34d0f5d0db7c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/781c743e18bfd9b7dc0383f036ae952bd1486f21
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ee7e40f7fb17f08a8cbae50553e5c2e10ae32fce
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/271ae0edbfc942795c162e6cf20d2bc02bd7fde4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2976e91a3e569cf2c92c9f71512c0ab1312fe965
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4c16e1cadcbcaf3c82d5fc310fbd34d0f5d0db7c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/781c743e18bfd9b7dc0383f036ae952bd1486f21
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ee7e40f7fb17f08a8cbae50553e5c2e10ae32fce
    Patch