Linux Kernel ksmbd Out-of-Bounds Write Vulnerability in Stream Write Function

A vulnerability in the Linux kernel's ksmbd component allows for out-of-bounds memory writes. The issue arises in the vfs_stream_write function, where the write offset was not properly validated against the length of the existing stream data. This lack of validation could lead to memory corruption. The vulnerability has been addressed by adding a check to ensure the write offset is within the valid range before proceeding with the operation. If the check fails, an error is returned.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory writes, potentially causing memory corruption or allowing for arbitrary code execution.