ksmbd: Fix Reference Count Leak in smb_check_perm_dacl()
Summary
GSD-2022-1003292: ksmbd: fix reference count leak in smb_check_perm_dacl(). Affects Kernel versions >= 777cad1604d68ed4379ec899d1f7d2f6a29f01f0, < cf824b95c12a1abacadbc2d069931963221a3414. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ksmbd package is a component of the Linux Kernel ecosystem. It provides support for the Server Message Block (SMB) protocol, allowing Linux systems to act as SMB servers. This vulnerability affects the ksmbd package in the Linux Kernel. The package is responsible for handling permission checks for SMB requests.
Vulnerability Detail
The vulnerability in ksmbd is related to a reference count leak in the smb_check_perm_dacl() function. This function is responsible for checking the permissions of a user or group in an Access Control List (ACL) associated with a file or directory. The reference count leak occurs when the function fails to properly release a reference to the ACL, leading to a resource leak. An attacker could potentially exploit this vulnerability to exhaust system resources, resulting in a denial-of-service condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is advised to apply the recommended fix by updating the Linux Kernel.
Conclusion
The vulnerability in ksmbd that caused a reference count leak in smb_check_perm_dacl() has been addressed in the latest version of the Linux Kernel. It is crucial to update the Linux Kernel to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ksmbd is a component of the Linux Kernel ecosystem that provides support for the Server Message Block (SMB) protocol, allowing Linux systems to act as SMB servers.
smb_check_perm_dacl() is a function in the ksmbd package that is responsible for checking the permissions of a user or group in an Access Control List (ACL) associated with a file or directory.
A reference count leak occurs when a program fails to properly release a reference to a resource, resulting in a resource leak and potential exhaustion of system resources.
This vulnerability could be exploited by an attacker to exhaust system resources, leading to a denial-of-service condition.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.47 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
