CVE-2024-57925

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-57925
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-57925.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-57925
Downstream
Related
Published
2025-01-19T11:52:43.244Z
Modified
2026-03-20T12:41:03.905600Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
Summary
ksmbd: fix a missing return value check bug
Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix a missing return value check bug

In the smb2sendinterimresp(), if ksmbdallocworkstruct() fails to allocate a node, it returns a NULL pointer to the inwork pointer. This can lead to an illegal memory write of inwork->responsebuf when allocateinterimrspbuf() attempts to perform a kzalloc() on it.

To address this issue, incorporating a check for the return value of ksmbdallocwork_struct() ensures that the function returns immediately upon allocation failure, thereby preventing the aforementioned illegal memory access.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57925.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6f0207218c4c125f5bf32055ac4220b4ef3b7e67
Fixed
781c743e18bfd9b7dc0383f036ae952bd1486f21
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f8cf1ebb7de62c7d807707ce4abb69d483629263
Fixed
ee7e40f7fb17f08a8cbae50553e5c2e10ae32fce
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
041bba4414cda37d00063952c9bff9c3d5812a19
Fixed
271ae0edbfc942795c162e6cf20d2bc02bd7fde4
Fixed
2976e91a3e569cf2c92c9f71512c0ab1312fe965
Fixed
4c16e1cadcbcaf3c82d5fc310fbd34d0f5d0db7c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-57925.json"