Threats tagged 'ghsa-68gh-wq6f-89rf'

A high-severity vulnerability in the Linux kernel SMB client involving use-after-free (UAF) and bounds checking errors in handling compound encrypted PDUs has been fixed. The flaw relates to improper management of the next_buffer pointer and incorrect bounds validation in receive_encrypted_standard(), potentially leading to memory corruption. The vulnerability has a CVSS score of 8.8, indicating critical confidentiality, integrity, and availability impacts.