CVE-2025-22038: ksmbd: validate zero num_subauth before sub_auth is accessed
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate zero numsubauth before subauth is accessed
Access psid->subauth[psid->numsubauth - 1] without checking if numsubauth is non-zero leads to an out-of-bounds read. This patch adds a validation step to ensure numsubauth != 0 before subauth is accessed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix for ksmbd: validate that num_subauth is non-zero before evaluating sub_auth[psid->num_subauth - 1], preventing out-of-bounds reads when num_subauth is 0.
Linux kernel (ksmbd) num_subauth validation = Ensure num_subauth != 0 before accessing sub_auth
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22038?
CVE-2025-22038 has a high severity rating due to its potential for causing out-of-bounds reads in the Linux kernel.
How do I fix CVE-2025-22038?
To fix CVE-2025-22038, update your Linux kernel to version 6.1.134 or later, or within the specified ranges to ensure the vulnerability is patched.
What does CVE-2025-22038 affect?
CVE-2025-22038 affects the Linux kernel, specifically versions between 6.2 and 6.14, including specific updates in that range.
How does CVE-2025-22038 impact system security?
CVE-2025-22038 can lead to potential data leakage or crashes due to out-of-bounds memory access, posing a risk to system integrity.
Who is affected by CVE-2025-22038?
Any users or organizations utilizing vulnerable versions of the Linux kernel are affected by CVE-2025-22038.