Threats tagged 'ghsa-qx7m-524h-7684'

A vulnerability in the Linux kernel SMB client was fixed to prevent out-of-bounds (OOB) reads in the move_smb2_ea_to_cifs() function. The issue arose because the loop condition allowed reading beyond the buffer when processing SMB2 extended attribute (EA) structures. The fix adds checks to ensure sufficient buffer size before reading and rejects malformed entries that could cause OOB reads. This change also updates error codes returned to userspace to more accurately reflect protocol errors.