Back to Database
Status published
Unknown
CVE-2025-21844
smb: client: Add check for next_buffer in receive_encrypted_standard()
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return value of cifs_buf_get() and cifs_small_buf_get() in receive_encrypted_standard() to prevent null pointer dereference.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-21844
Credits & Attribution
No credits recorded in the NVD database.
References
- https://git.kernel.org/stable/c/f277e479eea3d1aa18bc712abe1d2bf3dece2e30
- https://git.kernel.org/stable/c/f618aeb6cad2307e48a641379db610abcf593edf
- https://git.kernel.org/stable/c/24e8e4523d3071bc5143b0db9127d511489f7b3b
- https://git.kernel.org/stable/c/9e5d99a4cf2e23c716b44862975548415fae5391
- https://git.kernel.org/stable/c/a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bd
- https://git.kernel.org/stable/c/554736b583f529ee159aa95af9a0cbc12b5ffc96
- https://git.kernel.org/stable/c/860ca5e50f73c2a1cef7eefc9d39d04e275417f7
More from Linux
View All →CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown
0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown
0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown
0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown
0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown
0
Affected Vendor
Linux
View all reports →Affected Software
Linux
Vulnerable Versions:
b03c8099a738a04d2343547ae6a04e5f0f63d3fa, 858e73ff25639a0cc1f6f8d2587b62c045867e41, 9f528a8e68327117837b5e28b096f52af4c26a05, 534733397da26de0303057ce0b93a22bda150365, eec04ea119691e65227a97ce53c0da6b9b74b0b7, 5.10.211, 5.15.150, 6.1.69, 6.6.8, 6.7, 0, 5.10.235, 5.15.179, 6.1.130, 6.6.80, 6.12.17, 6.13.5, 6.14
Timeline
Official Publish:
March 12th, 2025
Last Modified:
May 23rd, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.