CVE - CVE-2025-21748

CVE-ID
CVE-2025-21748	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/760568c1f62ea874e8fb492f9cfa4f47b4b8391e URL:https://git.kernel.org/stable/c/760568c1f62ea874e8fb492f9cfa4f47b4b8391e MISC:https://git.kernel.org/stable/c/82f59d64e6297f270311b16b5dcf65be406d1ea3 URL:https://git.kernel.org/stable/c/82f59d64e6297f270311b16b5dcf65be406d1ea3 MISC:https://git.kernel.org/stable/c/aab98e2dbd648510f8f51b83fbf4721206ccae45 URL:https://git.kernel.org/stable/c/aab98e2dbd648510f8f51b83fbf4721206ccae45 MISC:https://git.kernel.org/stable/c/b4b902737746c490258de5cb55cab39e79927a67 URL:https://git.kernel.org/stable/c/b4b902737746c490258de5cb55cab39e79927a67 MISC:https://git.kernel.org/stable/c/ecb9947fa7c99a77b04d43404c6988a0d326e4a0 URL:https://git.kernel.org/stable/c/ecb9947fa7c99a77b04d43404c6988a0d326e4a0
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)