CVE-2025-21844smb: client: Add check for next_buffer in receive_encrypted_standard()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return value of cifs_buf_get() and cifs_small_buf_get() in receive_encrypted_standard() to prevent null pointer dereference.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-476
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from b03c8099a738a04d2343547ae6a04e5f0f63d3fa before f277e479eea3d1aa18bc712abe1d2bf3dece2e30; from 858e73ff25639a0cc1f6f8d2587b62c045867e41 before f618aeb6cad2307e48a641379db610abcf593edf; from 9f528a8e68327117837b5e28b096f52af4c26a05 before 24e8e4523d3071bc5143b0db9127d511489f7b3b; 534733397da26de0303057ce0b93a22bda150365 builds before 9e5d99a4cf2e23c716b44862975548415fae5391; from eec04ea119691e65227a97ce53c0da6b9b74b0b7 before a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bd; from eec04ea119691e65227a97ce53c0da6b9b74b0b7 before 554736b583f529ee159aa95af9a0cbc12b5ffc96; from eec04ea119691e65227a97ce53c0da6b9b74b0b7 before 860ca5e50f73c2a1cef7eefc9d39d04e275417f7; from 5.10.211 before 5.10.235; and 3 more ranges | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | all versions | CISA ADP |
linux linux_kernel linux:linux_kernel | from 6.1.69 before 6.1.130; from 6.6.8 before 6.6.80; from 6.7 before 6.12.17; from 6.13 before 6.13.5; 5.10.211; 5.15.150; 6.14; 6.14; and 1 more ranges | NVD |
References
- https://git.kernel.org/stable/c/f277e479eea3d1aa18bc712abe1d2bf3dece2e30patch
- https://git.kernel.org/stable/c/f618aeb6cad2307e48a641379db610abcf593edfpatch
- https://git.kernel.org/stable/c/24e8e4523d3071bc5143b0db9127d511489f7b3bpatch
- https://git.kernel.org/stable/c/9e5d99a4cf2e23c716b44862975548415fae5391patch
- https://git.kernel.org/stable/c/a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bdpatch
- https://git.kernel.org/stable/c/554736b583f529ee159aa95af9a0cbc12b5ffc96patch
- https://git.kernel.org/stable/c/860ca5e50f73c2a1cef7eefc9d39d04e275417f7patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.