Note:
This project will be discontinued after December 13, 2021. [more]
2019-09-04
An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.
| Products | Ubuntu_linux, Linux_kernel |
| Type | Out-of-bounds Read (CWE-125) |
| First patch | - None (likely due to unavailable code) |
| Patches | https://github.com/torvalds/linux/commit/b57a55e2200ede754e4dc9cce4ba9402544b9365 |
| Links |
• https://usn.ubuntu.com/4162-2/
• https://security.netapp.com/advisory/ntap-20191004-0001/ • https://usn.ubuntu.com/4162-1/ • https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 |