Threats tagged 'ghsa-pxm9-5xjv-gw34'

A vulnerability in the Linux kernel's ksmbd component was resolved by validating the payload size before reading a 4-byte handle. The function handle_response() previously dereferenced the payload as a 4 bytes without confirming the payload was at least that size, allowing a malformed or truncated message to cause an out-of-bounds read. The fix ensures the size is checked before dereferencing to prevent this issue.