CVE-2025-40099

cifs: parse_dfs_referrals: prevent oob on malformed input

References

Notes

 carnil> First introducing commit could not be determined.

Bugs

Status

Branch Status
upstream released (6.18-rc2) [6447b0e355562a1ff748c4a2ffb89aae7e84d2c9]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable released (6.17.5) [bb0f2e66e1ac043a5b238f5bcab4f26f3c317039]
6.12-upstream-stable released (6.12.55) [8bc4a8d39bac23d8b044fd3e2dbfd965f1d9b058]
6.6-upstream-stable released (6.6.114) [15c73964da9df994302f579ed14ee5fdbce7a332]
6.1-upstream-stable released (6.1.158) [cfacc7441f760e4a73cc71b6ff1635261d534657]
5.10-upstream-stable needed
sid released (6.17.6-1)
6.12-trixie-security released (6.12.57-1)
6.1-bookworm-security released (6.1.158-1)
5.10-bullseye-security needed