PT-2025-8300

CVE-2022-49366

·

Published

2025-02-26

·

Updated

2025-03-02

Description by

CVSS 4.0
6.0
Medium
MetricsAV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak issue has been identified in the Linux kernel, specifically in the ksmbd module. The problem occurs when the id and uid have the same value in the smb check perm dacl() function, causing the function to exit the loop without properly decrementing the reference count of the posix acls object. This can lead to memory leaks.
Recommendations For the affected Linux kernel versions, apply the fix by decreasing the reference count of posix acls before jumping to the label check access bits in the smb check perm dacl() function.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾