Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for create lease context Add missing bounds check for create lease context.
Affected products
linux: linux kernel; debian: debian linux
References7
- git.kernel.org/stable/c/60b7207893a8a06c78441934931a08fdad63f18e Patch
- git.kernel.org/stable/c/629dd37acc336ad778979361c351e782053ea284 Patch
- git.kernel.org/stable/c/800c482c9ef5910f05e3a713943c67cc6c1d4939 Patch
- git.kernel.org/stable/c/9a1b6ea955e6c7b29939a6d98701202f9d9644ec Patch
- git.kernel.org/stable/c/a41cd52f00907a040ca22c73d4805bb79b0d0972 Patch
- git.kernel.org/stable/c/bab703ed8472aa9d109c5f8c1863921533363dae Patch
- lists.debian.org/debian-lts-announce/2025/05/msg00045.html Mailing ListThird Party Advisory
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 1% percentile: 45 · as of 7 November 2026
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.