Linux Kernel CIFS Buffer Overflow Vulnerability in Symlink Handling

A potential buffer overflow vulnerability has been identified in the Linux kernel's Common Internet File System (CIFS) implementation, specifically in how symbolic links are processed. This issue arises because the 'link_len' variable, which is derived from user input, is not properly validated before being used, leading to the possibility of overflowing the 'link_str' buffer. The vulnerability has been addressed by adding a check to ensure that 'link_len' does not exceed the buffer's capacity.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, which may allow for arbitrary code execution or cause a denial-of-service condition by crashing the system.