In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix integer overflows on 32 bit systems
On 32bit systems the addition operations in ipcmsgalloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBDIPCMAX_PAYLOAD to avoid overflow.
[
{
"digest": {
"function_hash": "86876354374375209707343127401649620572",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecb9947fa7c99a77b04d43404c6988a0d326e4a0",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-17ae1f79",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_write"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "86876354374375209707343127401649620572",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82f59d64e6297f270311b16b5dcf65be406d1ea3",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-33ceda09",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_write"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"178455369135044988774660168010101610004",
"184685191016905084183201989056934631535",
"160155660665567600191893089853824489481",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@760568c1f62ea874e8fb492f9cfa4f47b4b8391e",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-34fb4ebb",
"target": {
"file": "fs/smb/server/transport_ipc.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "256446977260995635084594705049844373749",
"length": 482.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aab98e2dbd648510f8f51b83fbf4721206ccae45",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-48626e33",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_ipc_spnego_authen_request"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"178455369135044988774660168010101610004",
"184685191016905084183201989056934631535",
"160155660665567600191893089853824489481",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4b902737746c490258de5cb55cab39e79927a67",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-4a78f883",
"target": {
"file": "fs/smb/server/transport_ipc.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "287732977744424999376128508858947367057",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4b902737746c490258de5cb55cab39e79927a67",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-4fe3456f",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_ioctl"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "287732977744424999376128508858947367057",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aab98e2dbd648510f8f51b83fbf4721206ccae45",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-5b425422",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_ioctl"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "287732977744424999376128508858947367057",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@760568c1f62ea874e8fb492f9cfa4f47b4b8391e",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-629dd106",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_ioctl"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "256446977260995635084594705049844373749",
"length": 482.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4b902737746c490258de5cb55cab39e79927a67",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-73909750",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_ipc_spnego_authen_request"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "86876354374375209707343127401649620572",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3b9fb2764591d792d160f375851013665a9e820",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-76da3466",
"target": {
"file": "fs/ksmbd/transport_ipc.c",
"function": "ksmbd_rpc_write"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "86876354374375209707343127401649620572",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aab98e2dbd648510f8f51b83fbf4721206ccae45",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-7f70161a",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_write"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "256446977260995635084594705049844373749",
"length": 482.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@760568c1f62ea874e8fb492f9cfa4f47b4b8391e",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-829978d6",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_ipc_spnego_authen_request"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "86876354374375209707343127401649620572",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4b902737746c490258de5cb55cab39e79927a67",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-890721e1",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_write"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "287732977744424999376128508858947367057",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3b9fb2764591d792d160f375851013665a9e820",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-8da90ac0",
"target": {
"file": "fs/ksmbd/transport_ipc.c",
"function": "ksmbd_rpc_ioctl"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"178455369135044988774660168010101610004",
"184685191016905084183201989056934631535",
"160155660665567600191893089853824489481",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82f59d64e6297f270311b16b5dcf65be406d1ea3",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-8e44f327",
"target": {
"file": "fs/smb/server/transport_ipc.c"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"178455369135044988774660168010101610004",
"184685191016905084183201989056934631535",
"160155660665567600191893089853824489481",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aab98e2dbd648510f8f51b83fbf4721206ccae45",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-bb221287",
"target": {
"file": "fs/smb/server/transport_ipc.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "256446977260995635084594705049844373749",
"length": 482.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82f59d64e6297f270311b16b5dcf65be406d1ea3",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-bce19b03",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_ipc_spnego_authen_request"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "256446977260995635084594705049844373749",
"length": 482.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecb9947fa7c99a77b04d43404c6988a0d326e4a0",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-c99124c2",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_ipc_spnego_authen_request"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "287732977744424999376128508858947367057",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecb9947fa7c99a77b04d43404c6988a0d326e4a0",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-d2099ee4",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_ioctl"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"178455369135044988774660168010101610004",
"184685191016905084183201989056934631535",
"160155660665567600191893089853824489481",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecb9947fa7c99a77b04d43404c6988a0d326e4a0",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-da0d8411",
"target": {
"file": "fs/smb/server/transport_ipc.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "256446977260995635084594705049844373749",
"length": 482.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3b9fb2764591d792d160f375851013665a9e820",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-dd09e27e",
"target": {
"file": "fs/ksmbd/transport_ipc.c",
"function": "ksmbd_ipc_spnego_authen_request"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"178455369135044988774660168010101610004",
"184685191016905084183201989056934631535",
"160155660665567600191893089853824489481",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323",
"281158033710739462846229194295062348801",
"339671675651641832871465510901681894236",
"235609210263962774608221641207907734323"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3b9fb2764591d792d160f375851013665a9e820",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-dd9cc005",
"target": {
"file": "fs/ksmbd/transport_ipc.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "86876354374375209707343127401649620572",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@760568c1f62ea874e8fb492f9cfa4f47b4b8391e",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-ef810e10",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_write"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "287732977744424999376128508858947367057",
"length": 558.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82f59d64e6297f270311b16b5dcf65be406d1ea3",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-21748-f0c5f2f6",
"target": {
"file": "fs/smb/server/transport_ipc.c",
"function": "ksmbd_rpc_ioctl"
},
"signature_type": "Function"
}
]