An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 6.1.36 (including) | 6.7 (excluding) |
| Linux_kernel | Linux | 6.7-rc1 (including) | 6.7-rc1 (including) |
| Linux_kernel | Linux | 6.7-rc2 (including) | 6.7-rc2 (including) |
| Linux_kernel | Linux | 6.7-rc3 (including) | 6.7-rc3 (including) |
| Linux_kernel | Linux | 6.7-rc4 (including) | 6.7-rc4 (including) |
| Linux_kernel | Linux | 6.7-rc5 (including) | 6.7-rc5 (including) |