CVE-2024-57925 Details

A vulnerability in the Linux kernel's ksmbd component was introduced by a missing return value check in the smb2_send_interim_resp() function. If the ksmbd_alloc_work_struct() function fails to allocate a node, it returns a NULL pointer to the in_work pointer. This oversight can lead to an illegal memory write of in_work->response_buf when allocate_interim_rsp_buf() tries to perform a memory allocation on it. The vulnerability has been addressed by adding a check for the return value of ksmbd_alloc_work_struct(), ensuring that the function exits immediately upon allocation failure, thus preventing the illegal memory access.