Linux Kernel ksmbd Missing Return Value Check Vulnerability

A vulnerability in the Linux kernel's ksmbd component was introduced by a missing return value check in the smb2_send_interim_resp() function. If the ksmbd_alloc_work_struct() function fails to allocate a node, it returns a NULL pointer to the in_work pointer. This oversight can lead to an illegal memory write of in_work->response_buf when allocate_interim_rsp_buf() tries to perform a memory allocation on it. The vulnerability has been addressed by adding a check for the return value of ksmbd_alloc_work_struct(), ensuring that the function exits immediately upon allocation failure, thus preventing the illegal memory access.

Impact

Exploitation of this vulnerability could lead to illegal memory writes, potentially causing memory corruption or allowing for arbitrary code execution.