CVE-2025-21946

ksmbd: fix out-of-bounds in parse_sec_desc()

References

Notes

 carnil> Vulnerable versions: 5.15.

Bugs

Status

Branch Status
upstream released (6.14-rc6) [d6e13e19063db24f94b690159d0633aaf72a0f03]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.13-upstream-stable released (6.13.7) [6a9831180d0b23b5c97e2bd841aefc8f82900172]
6.12-upstream-stable released (6.12.19) [159d059cbcb0e6d0e7a7b34af3862ba09a6b22d1]
6.6-upstream-stable released (6.6.83) [c1569dbbe2d43041be9f3fef7ca08bec3b66ad1b]
6.1-upstream-stable needed
5.10-upstream-stable N/A "Vulnerable code not present"
sid released (6.12.19-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security needed
5.10-bullseye-security N/A "Vulnerable code not present"