Vulnerability in cifs package: Bad Output Lengths in smb2_ioctl_query_info()
Summary
GSD-2022-1001610: cifs: prevent bad output lengths in smb2_ioctl_query_info(). Affects Kernel versions < fadddfc1dc3c6f79b21cff4a7e9a6c40b84fbc53. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The cifs package is a component of the Linux Kernel that provides support for the Common Internet File System (CIFS) protocol. CIFS allows Linux systems to access files and resources on remote Windows servers. It is widely used for network file sharing and provides features such as authentication, file access, and directory browsing. The smb2_ioctl_query_info() function in the cifs package is responsible for handling IOCTL requests to query information about files or directories. However, a vulnerability exists in this function that can lead to bad output lengths, potentially causing memory corruption or other security issues.
Vulnerability Detail
The vulnerability in the cifs package arises from a lack of proper validation of output lengths in the smb2_ioctl_query_info() function. An attacker could exploit this vulnerability by sending a specially crafted IOCTL request, causing the function to return incorrect output lengths. This can result in memory corruption, leading to a variety of potential security risks, including remote code execution or denial of service attacks. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.16.19 by commit fadddfc1dc3c6f79b21cff4a7e9a6c40b84fbc53.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
The cifs package in the Linux Kernel is vulnerable to bad output lengths in the smb2_ioctl_query_info() function. This vulnerability can lead to memory corruption and other security risks. It is crucial to update the Linux Kernel to version v5.16.19 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The cifs package is a component of the Linux Kernel that provides support for the Common Internet File System (CIFS) protocol, allowing Linux systems to access files and resources on remote Windows servers.
The impact of this vulnerability can vary, but it has the potential to lead to memory corruption, remote code execution, or denial of service attacks.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, update the Linux Kernel to version v5.16.19 or later by applying the commit fadddfc1dc3c6f79b21cff4a7e9a6c40b84fbc53 to the kernel source code and recompiling the kernel.
No specific workaround is mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
