Vulnerability in cifs package: Bad output lengths in smb2_ioctl_query_info()
Summary
GSD-2022-1001302: cifs: prevent bad output lengths in smb2_ioctl_query_info(). Affects Kernel versions < 7529fbee10d82493c5cb109e51788bf74816d1c0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The cifs package is a component of the Linux Kernel ecosystem. It provides support for the Common Internet File System (CIFS) protocol, allowing Linux systems to access files and resources on remote Windows servers. The package includes various functions and modules for handling CIFS operations. However, a vulnerability has been discovered in the smb2_ioctl_query_info() function, which can lead to bad output lengths.
Vulnerability Detail
The smb2_ioctl_query_info() function in the cifs package is susceptible to a security vulnerability. This vulnerability arises from the possibility of incorrect output lengths being returned, potentially leading to memory corruption or information disclosure. An attacker could exploit this vulnerability to execute arbitrary code or obtain sensitive information from the affected system. The vulnerability has been assigned the ID GSD-2022-1001302 and has been fixed in Linux Kernel version v5.17.2.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply the patch manually to their existing cifs package. The patch can be obtained from the commit 7529fbee10d82493c5cb109e51788bf74816d1c0 in the Linux Kernel repository. Here is an example of how to apply the patch using the git command:
$ git clone https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
$ cd linux
$ git cherry-pick 7529fbee10d82493c5cb109e51788bf74816d1c0
$ make
$ make install
It is recommended to consult the official documentation or seek assistance from the Linux Kernel community for detailed instructions on applying the patch.
Conclusion
In conclusion, the cifs package in the Linux Kernel ecosystem is vulnerable to bad output lengths in the smb2_ioctl_query_info() function. This vulnerability can have severe consequences, including memory corruption and information disclosure. Users should update their cifs package to version v5.17.2 or later to address this vulnerability. Applying the provided patch manually or seeking assistance from the Linux Kernel community are recommended actions. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The cifs package is a component of the Linux Kernel ecosystem that provides support for the Common Internet File System (CIFS) protocol, enabling Linux systems to access files and resources on remote Windows servers.
smb2_ioctl_query_info() is a function within the cifs package that is responsible for querying information from remote servers using the SMB2 protocol.
This vulnerability can lead to bad output lengths, potentially resulting in memory corruption or information disclosure. Attackers could exploit this vulnerability to execute arbitrary code or obtain sensitive information from the affected system.
Yes, the vulnerability has been fixed in Linux Kernel version v5.17.2. Users are advised to update their cifs package to this version or later to mitigate the risk.
The updated cifs package can be obtained from the official Linux Kernel repository. Users should ensure they are using version v5.17.2 or later to benefit from the security fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
