Denial Of Service (DoS)

2023-02-0323:00:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

kernel

smb2

vulnerability

cifs

local

attack

software

0.0004 Low

EPSS

Percentile

12.7%

JSON

kernel is vulnerable to Denial of Service (DoS) attacks. The vulnerability exists in the smb2_ioctl_query_info function of fs/cifs/smb2ops.c, in Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged attacker to crash the system.

CPENameOperatorVersion
kernel-rteq4.18.0__383.rt7.168.el8
kernel-rteq4.18.0__372.36.1.rt7.193.el8_6
kernel-rteq4.18.0__257.rt7.22.el8
kernel-rteq4.18.0__338.rt7.119.el8
kernel-rteq4.18.0__372.40.1.rt7.197.el8_6
kernel-rteq4.18.0__348.rt7.130.el8
kernel-rteq4.18.0__302.1.rt7.70.el8
kernel-rteq4.18.0__294.rt7.61.el8
kernel-rteq4.18.0__394.rt7.179.el8
kernel-rteq4.18.0__357.rt7.142.el8

Name	Operator	Version
kernel-rt	eq	4.18.0__383.rt7.168.el8
kernel-rt	eq	4.18.0__372.36.1.rt7.193.el8_6
kernel-rt	eq	4.18.0__257.rt7.22.el8
kernel-rt	eq	4.18.0__338.rt7.119.el8
kernel-rt	eq	4.18.0__372.40.1.rt7.197.el8_6
kernel-rt	eq	4.18.0__348.rt7.130.el8
kernel-rt	eq	4.18.0__302.1.rt7.70.el8
kernel-rt	eq	4.18.0__294.rt7.61.el8
kernel-rt	eq	4.18.0__394.rt7.179.el8
kernel-rt	eq	4.18.0__357.rt7.142.el8