CyberRota Analysis
AI-GeneratedThe Linux kernel's ksmbd component is vulnerable to out-of-bounds reads due to improper validation of IPC share configuration payload sizes, which could lead to potential information disclosure or system instability. Organizations using Linux systems with ksmbd enabled should prioritize this vulnerability to mitigate risks associated with unauthorized access to sensitive data. Immediate action is recommended for environments where IPC share configurations are utilized.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the path length.