CVE-2024-57925— ksmbd: fix a missing return value check bug
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 14
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 6f0207218c4c125f5bf32055ac4220b4ef3b7e67< 781c743e18bfd9b7dc0383f036ae952bd1486f21 | affected |
f8cf1ebb7de62c7d807707ce4abb69d483629263< ee7e40f7fb17f08a8cbae50553e5c2e10ae32fce | affected | ||
041bba4414cda37d00063952c9bff9c3d5812a19< 271ae0edbfc942795c162e6cf20d2bc02bd7fde4 | affected | ||
041bba4414cda37d00063952c9bff9c3d5812a19< 2976e91a3e569cf2c92c9f71512c0ab1312fe965 | affected | ||
041bba4414cda37d00063952c9bff9c3d5812a19< 4c16e1cadcbcaf3c82d5fc310fbd34d0f5d0db7c | affected | ||
5.15.145< 5.15.177 | affected | ||
6.1.71< 6.1.125 | affected | ||
6.6 | affected | ||
| … +6 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-57925
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ksmbd: fix a missing return value check bug
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to allocate a node, it returns a NULL pointer to the in_work pointer. This can lead to an illegal memory write of in_work->response_buf when allocate_interim_rsp_buf() attempts to perform a kzalloc() on it. To address this issue, incorporating a check for the return value of ksmbd_alloc_work_struct() ensures that the function returns immediately upon allocation failure, thereby preventing the aforementioned illegal memory access.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在smb2_send_interim_resp函数中，未检查ksmbd_alloc_work_struct的返回值，可能导致非法内存写入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-57925
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-57925
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-57925 (5)
Same Patch Batch · Linux · 2025-01-19 · 47 CVEs total
| CVE-2024-57929 | 7.8 HIGH | dm array: fix releasing a faulty array block twice in dm_array_cursor_end |
| CVE-2025-21652 | 7.8 HIGH | ipvlan: Fix use-after-free in ipvlan_get_iflink(). |
| CVE-2024-57918 | 7.8 HIGH | drm/amd/display: fix page fault due to max surface definition mismatch |
| CVE-2024-57921 | 7.8 HIGH | drm/amdgpu: Add a lock when accessing the buddy trim function |
| CVE-2025-21631 | 7.8 HIGH | block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() |
| CVE-2024-57926 | 7.8 HIGH | drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err |
| CVE-2025-21646 | 7.5 HIGH | afs: Fix the maximum cell name length |
| CVE-2025-21647 | 7.3 HIGH | sched: sch_cake: add bounds checks to host bulk flow fairness counts |
| CVE-2025-21638 | 7.1 HIGH | sctp: sysctl: auth_enable: avoid using current->nsproxy |
| CVE-2025-21637 | 7.1 HIGH | sctp: sysctl: udp_port: avoid using current->nsproxy |
| CVE-2025-21640 | 7.1 HIGH | sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy |
| CVE-2025-21650 | 7.1 HIGH | net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue |
| CVE-2024-57911 | iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer | |
| CVE-2024-57910 | iio: light: vcnl4035: fix information leak in triggered buffer | |
| CVE-2024-57912 | iio: pressure: zpa2326: fix information leak in triggered buffer | |
| CVE-2024-57904 | iio: adc: at91: call input_free_device() on allocated iio_dev | |
| CVE-2024-57908 | iio: imu: kmx61: fix information leak in triggered buffer | |
| CVE-2024-57913 | usb: gadget: f_fs: Remove WARN_ON in functionfs_bind | |
| CVE-2024-57914 | usb: typec: tcpci: fix NULL pointer issue on shared irq case | |
| CVE-2024-57928 | netfs: Fix enomem handling in buffered reads |
Showing top 20 of 47 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on - CVE-2026-74573
iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for
Same vendor: Linux
- CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on - CVE-2026-74573
iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for
V. Comments for CVE-2024-57925
No comments yet