QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-21748

Back to search

CVE-2025-21748

Published: Feb 27, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

VendorProductVersions

Linux

Linux

affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < f3b9fb2764591d792d160f375851013665a9e820
affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < 760568c1f62ea874e8fb492f9cfa4f47b4b8391e
affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < 82f59d64e6297f270311b16b5dcf65be406d1ea3
affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < b4b902737746c490258de5cb55cab39e79927a67
affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < ecb9947fa7c99a77b04d43404c6988a0d326e4a0

+1 more versions

Linux

Linux

affected
5.15
unaffected
0 - < 5.15
unaffected
5.15.179 - <= 5.15.*
unaffected
6.1.129 - <= 6.1.*
unaffected
6.6.78 - <= 6.6.*

+3 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now