CVE-2025-22042

MEDIUM

Linux Kernel 5.15-6.14.1 - Out-of-Bounds Write in ksmbd Create Lease Context

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for create lease context Add missing bounds check for create lease context.

References (7)

Core 7

Core References

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Patch

https://git.kernel.org/stable/c/629dd37acc336ad778979361c351e782053ea284

Patch

https://git.kernel.org/stable/c/60b7207893a8a06c78441934931a08fdad63f18e

Patch

https://git.kernel.org/stable/c/800c482c9ef5910f05e3a713943c67cc6c1d4939

Patch

https://git.kernel.org/stable/c/a41cd52f00907a040ca22c73d4805bb79b0d0972

Patch

https://git.kernel.org/stable/c/9a1b6ea955e6c7b29939a6d98701202f9d9644ec

Patch

https://git.kernel.org/stable/c/bab703ed8472aa9d109c5f8c1863921533363dae

Scores

CVSS v3 5.5

EPSS 0.0009

EPSS Percentile 24.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (21)

debian/debian_linux 11.0

linux/Kernel 5.15.0 - 6.1.134linux

linux/Kernel 6.13.0 - 6.13.11linux

linux/Kernel 6.14.0 - 6.14.2linux

linux/Kernel 6.2.0 - 6.6.87linux

linux/Kernel 6.7.0 - 6.12.23linux

Linux/Linux < 5.15

Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 60b7207893a8a06c78441934931a08fdad63f18e

Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 629dd37acc336ad778979361c351e782053ea284

Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 800c482c9ef5910f05e3a713943c67cc6c1d4939

... and 11 more

Published Apr 16, 2025

Tracked Since Feb 18, 2026