Threats tagged 'ghsa-3qpp-vv65-cq9g'

A heap overflow vulnerability in the Linux kernel's SMB client was fixed. The flaw occurs during rewriting of Discretionary Access Control List (DACL) owner/group SIDs, where the buffer allocation does not account for the maximum possible size of replacement SIDs, leading to an overflow. This issue was detected by Kernel Address Sanitizer (KASAN) and affects specific Linux kernel versions. The vulnerability has a high CVSS score of 8.8, indicating significant confidentiality, integrity, and availability impact.