Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220

Description The issue concerns an error in the length of the VALIDATE NEGOTIATE INFO message in the cifs component. The actual impact and potential for attack have not been proven yet.

Recommendations For Linux Kernel versions prior to v5.4.220, update to version v5.4.220 or later to resolve the issue.