NULL ptr dereference in smb2_ioctl_query_info() in cifs package
Summary
GSD-2022-1001303: cifs: fix NULL ptr dereference in smb2_ioctl_query_info(). Affects Kernel versions < 49bef50e585d738e957060f669e872b4ad15eb87. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The cifs package is a part of the Linux Kernel ecosystem and provides support for the Common Internet File System (CIFS) protocol. CIFS allows Linux systems to access files and resources on remote Windows servers. The smb2_ioctl_query_info() function in the cifs package is responsible for handling IOCTL requests to query information from the server. However, a vulnerability exists in this function that can lead to a NULL pointer dereference.
Vulnerability Detail
The vulnerability occurs when the smb2_ioctl_query_info() function in the cifs package dereferences a NULL pointer. This can happen if the function is called with a malformed IOCTL request or if the server responds with unexpected data. An attacker can exploit this vulnerability by sending a specially crafted IOCTL request to a vulnerable system, causing the function to dereference a NULL pointer and potentially leading to a system crash or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above by updating the Linux Kernel.
Conclusion
The NULL ptr dereference vulnerability in smb2_ioctl_query_info() in the cifs package can potentially lead to system crashes or arbitrary code execution. It is recommended to update the Linux Kernel to version v5.17.2 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The cifs package is a part of the Linux Kernel ecosystem and provides support for the Common Internet File System (CIFS) protocol. It allows Linux systems to access files and resources on remote Windows servers.
The smb2_ioctl_query_info() function is a part of the cifs package and is responsible for handling IOCTL requests to query information from the server.
A NULL pointer dereference occurs when a program attempts to access or dereference a memory location that has a NULL (invalid) pointer value. This can lead to crashes or potentially allow an attacker to execute arbitrary code.
An attacker can exploit this vulnerability by sending a specially crafted IOCTL request to a vulnerable system, causing the smb2_ioctl_query_info() function to dereference a NULL pointer and potentially leading to a system crash or arbitrary code execution.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
