CVE-2025-21748
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
In the Linux kernel's ksmbd module, an integer overflow vulnerability was found on 32-bit systems. Addition operations in ipc_msg_alloc() can overflow, leading to potential memory corruption.
Risk Assessment
Organizations using 32-bit systems are at risk of memory corruption, which could lead to crashes or security breaches.
Recommendation
Update the Linux kernel to a version containing the fix that adds bounds checking using KSMBD_IPC_MAX_PAYLOAD.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.