Null Pointer Dereference in Linux Kernel SMB Client

CVE-2025-21844

Summary

A vulnerability has been identified in the Linux kernel's SMB client that could lead to a null pointer dereference. The issue arises in the 'receive_encrypted_standard()' function where there is a lack of checks for the return values from 'cifs_buf_get()' and 'cifs_small_buf_get()'. This oversight could allow an attacker to exploit the vulnerability, resulting in potential crashes or undefined behavior in the affected systems. Resolving this flaw involves adding necessary checks to ensure robust handling of buffer retrieval processes.

References