CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard()
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Add check for nextbuffer in receiveencryptedstandard()
Add check for the return value of cifsbufget() and cifssmallbufget() in receiveencryptedstandard() to prevent null pointer dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21844?
CVE-2025-21844 is rated as a high-severity vulnerability due to its potential for a null pointer dereference affecting the Linux kernel.
How do I fix CVE-2025-21844?
To resolve CVE-2025-21844, ensure your Linux kernel is updated to the patched version that includes the fix for the null pointer dereference in receive_encrypted_standard().
Which versions of the Linux kernel are affected by CVE-2025-21844?
CVE-2025-21844 affects multiple versions of the Linux kernel that do not include the fix for the vulnerability.
What are the consequences of exploiting CVE-2025-21844?
Exploiting CVE-2025-21844 could lead to a system crash or denial of service due to a null pointer dereference.
What components of the Linux kernel are affected by CVE-2025-21844?
CVE-2025-21844 specifically affects the SMB client components of the Linux kernel.