Threats tagged 'ghsa-c922-2344-3839'

A null pointer dereference vulnerability was identified and fixed in the Linux kernel's SMB server component within the smb2_open() function. The issue occurs when the requested operation level is SMB2_OPLOCK_LEVEL_LEASE and the parse_lease_state() function returns NULL, leading to a potential null pointer dereference of lease_ctx_info. The fix involves adding a check to ensure lease_ctx_info is not NULL before use. This vulnerability could cause a denial of service by crashing the kernel.