In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return value of cifs_buf_get() and cifs_small_buf_get() in receive_encrypted_standard() to prevent null pointer dereference.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10.211:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15.150:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/24e8e4523d3071bc5143b0db9127d511489f7b3b cve-icon cve-icon
https://git.kernel.org/stable/c/554736b583f529ee159aa95af9a0cbc12b5ffc96 cve-icon cve-icon
https://git.kernel.org/stable/c/860ca5e50f73c2a1cef7eefc9d39d04e275417f7 cve-icon cve-icon
https://git.kernel.org/stable/c/9e5d99a4cf2e23c716b44862975548415fae5391 cve-icon cve-icon
https://git.kernel.org/stable/c/a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bd cve-icon cve-icon
https://git.kernel.org/stable/c/f277e479eea3d1aa18bc712abe1d2bf3dece2e30 cve-icon cve-icon
https://git.kernel.org/stable/c/f618aeb6cad2307e48a641379db610abcf593edf cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025031210-CVE-2025-21844-a1cc@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21844 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21844 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.0003}

 epss

{'score': 0.00042}

Thu, 13 Mar 2025 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10.211:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15.150:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 13 Mar 2025 13:00:00 +0000

Type Values Removed Values Added
References

Thu, 13 Mar 2025 02:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 12 Mar 2025 09:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return value of cifs_buf_get() and cifs_small_buf_get() in receive_encrypted_standard() to prevent null pointer dereference.
Title smb: client: Add check for next_buffer in receive_encrypted_standard()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-03-12T09:42:00.435Z

Updated: 2025-10-01T19:36:34.743Z

Reserved: 2024-12-29T08:45:45.778Z

Link: CVE-2025-21844

cve-icon Vulnrichment

Updated: 2025-10-01T16:58:00.670Z

cve-icon NVD

Status : Modified

Published: 2025-03-12T10:15:16.677

Modified: 2025-10-01T20:18:27.837

Link: CVE-2025-21844

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-03-12T00:00:00Z

Links: CVE-2025-21844 - Bugzilla