CVE-2025-21748: ksmbd: fix integer overflows on 32 bit systems
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix integer overflows on 32 bit systems
On 32bit systems the addition operations in ipcmsgalloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBDIPCMAXPAYLOAD to avoid overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21748?
The severity of CVE-2025-21748 is classified as high due to the potential for memory corruption on 32-bit systems.
How do I fix CVE-2025-21748?
To fix CVE-2025-21748, update the Linux kernel to the latest version where this vulnerability has been patched.
Who is affected by CVE-2025-21748?
CVE-2025-21748 affects users running 32-bit systems with vulnerable versions of the Linux kernel.
What are the consequences of CVE-2025-21748?
Consequences of CVE-2025-21748 may include system instability and unauthorized access due to potential memory corruption.
What is the nature of the vulnerability in CVE-2025-21748?
CVE-2025-21748 involves integer overflows during addition operations in ipc_msg_alloc(), leading to memory corruption.