Linux kernel
cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*
A NULL pointer dereference vulnerability has been identified in the Linux kernel's ksmbd component, specifically within the smb2_get_info_filesystem function. This issue arises when the share's path is NULL, leading to a crash. The vulnerability affects several versions of the Linux kernel.
Exploitation of this vulnerability causes a NULL pointer dereference, leading to a crash of the ksmbd service.
The vulnerability can be reproduced by accessing a share where the share's path is NULL. This can be done by configuring a share in ksmbd without a valid path, which will trigger the NULL pointer dereference when the smb2_get_info_filesystem function is called.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. Instructions for upgrading can be found in the official Linux kernel documentation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.