Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
An integer overflow vulnerability has been identified in the Linux kernel's ksmbd component, specifically on 32-bit systems. The issue arises in the ipc_msg_alloc() function, where addition operations can potentially overflow, leading to memory corruption. This vulnerability has been addressed by implementing bounds checking using KSMBD_IPC_MAX_PAYLOAD to prevent such overflow conditions.
Exploitation of this vulnerability could lead to memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.