Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix incorrect validation for num_aces field of smb_acl
parse_dcal() validate num_aces to allocate posix_ace_state_array.
if (num_aces > ULONG_MAX / sizeof(struct smb_ace *))
It is an incorrect validation that we can create an array of size ULONG_MAX.
smb_acl has ->size field to calculate actual number of aces in request buffer
size. Use this to check invalid num_aces.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.15 | 5.15.180 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.12.21-1 | — |
| Debian 13 | linux | 6.12.21-1 | — |
| Debian 12 | linux | 6.1.133-1 | DSA-5900-1 |
| Debian 11 | linux-6.1 | 6.1.137-1~deb11u1 | DLA-4193-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1069.71 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-84.84 | USN-7764-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1039.41 | USN-7764-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1038.44 | USN-7802-1 |
| Ubuntu 24.04 LTS | linux-azure-6.11 | 6.11.0-1018.18~24.04.1 | USN-7628-1 |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1025.27 | USN-7809-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1040.42 | USN-7764-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.11 | 6.11.0-1016.16~24.04.1 | USN-7605-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1036.40 | USN-7764-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1023.25 | USN-7764-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.11 | 6.11.0-28.28~24.04.1 | USN-7605-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1037.37 | USN-7779-1 |
| Ubuntu 24.04 LTS | linux-intel +4 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-84.84.1 | USN-7764-1 |
| Ubuntu 24.04 LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1015.16~24.04.2 | USN-7605-2 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1039.42 | USN-7765-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.11 | 6.11.0-1012.12 | — |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1039.42.1 | USN-7765-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1010.10 | — |
| Ubuntu 24.04 LTS | linux-oem-6.11 | 6.11.0-1024.24 | USN-7606-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1037.38 | USN-7801-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1039.43 | USN-7790-1 |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1018.19 | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-142.152 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1086.93 | USN-7591-4 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1039.41~22.04.1 | USN-7766-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1091.100 | USN-7597-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1036.42~22.04.1 | USN-7802-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1091.100.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1085.94 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1040.42~22.04.1 | USN-7766-1 |
| Ubuntu 22.04 LTS | linux-gke +1 | 5.15.0-1083.89 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1068.76 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-85.85~22.04.1 | USN-7801-1, USN-7764-2 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1078.81 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1037.37~22.04.1 | USN-7779-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1081.87 | USN-7591-5 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1082.87 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-84.84.1~22.04.1 | USN-7764-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1080.81 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1039.42~22.04.1 | USN-7765-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1039.39 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1028.28 | USN-7591-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1037.38~22.04.1 | USN-7801-3 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1080.83 | USN-7591-6 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-84.84~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1050.54 | USN-7602-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2030.31 | USN-7800-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1034.35 | USN-7767-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1079.81 | USN-7591-3 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1086.95 | USN-7591-3 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1034.35~22.04.1 | USN-7767-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1039.41+fips1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1040.46+fips1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-84.84+fips1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1040.42+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1086.93+fips1 | USN-7591-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1091.100+fips1 | USN-7597-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-142.152+fips1 | USN-7591-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1085.94+fips1 | USN-7591-2 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1086.93~20.04.1 | USN-7592-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1091.100~20.04.1 | USN-7598-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1085.94~20.04.1 | USN-7592-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-142.152~20.04.1 | USN-7593-1, USN-7592-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1078.81~20.04.1 | USN-7592-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1039.39~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 +1 | 5.15.0-1083.89~20.04.1 | USN-7655-1, USN-7592-1 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1081.85~20.04.1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-101.33.4.3.el10uek | ELSA-2025-20530, ELSA-2025-20480 |
Advisories 36
- USN-7593-1 linux-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7598-1 linux-azure-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7592-1 linux-aws-5.15, linux-gcp-5.15, linux-ibm-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7602-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7655-1 linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7802-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7809-1 linux-azure-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7801-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7801-3 linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7800-1 linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7801-2 linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7628-1 linux-azure, linux-azure-6.11 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7605-1 linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7591-1 linux, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7591-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7605-2 linux-lowlatency, linux-lowlatency-hwe-6.11 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7591-5 linux-intel-iotg vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7597-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7606-1 linux-oem-6.11 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7591-6 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7597-2 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7591-3 linux-intel-iot-realtime, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7591-4 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7764-1 linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7765-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7766-1 linux-aws-6.8, linux-gcp-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7767-2 linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7767-1 linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7779-1 linux-ibm, linux-ibm-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7790-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- WID-SEC-2025-0698 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 13, 2026
- USN-7764-2 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- DSA-5900-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-4193-1 linux-6.1 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ELSA-2025-20530 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 18, 2025
- ELSA-2025-20480 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 17, 2025
References
- https://git.kernel.org/stable/c/c3a3484d9d31b27a3db0fab91fcf191132d65236
- https://git.kernel.org/stable/c/9c4e202abff45f8eac17989e549fc7a75095f675
- https://git.kernel.org/stable/c/d0f87370622a853b57e851f7d5a5452b72300f19
- https://git.kernel.org/stable/c/a4cb17797a5d241f1e509cb5b46ed95a80c2f5fd
- https://git.kernel.org/stable/c/f6a6721802ac2f12f4c1bbe839a4c229b61866f2
- https://git.kernel.org/stable/c/1b8b67f3c5e5169535e26efedd3e422172e2db64