Vulnerability details
CVE-2025-21844
Linux LinuxSiemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
smb: client: Add check for next_buffer in receive_encrypted_standard()
CVSS 3.1
7.5High
Official description
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return value of cifs_buf_get() and cifs_small_buf_get() in receive_encrypted_standard() to prevent null pointer dereference.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 5.5Medium | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 6.7 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5.10.211 ≤ v < 5.10.235 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5.15.150 ≤ v < 5.15.179 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 534733397da26de0303057ce0b93a22bda150365 ≤ v < 9e5d99a4cf2e23c716b44862975548415fae5391 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6.1.69 ≤ v < 6.1.130 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6.6.8 ≤ v < 6.6.80 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 858e73ff25639a0cc1f6f8d2587b62c045867e41 ≤ v < f618aeb6cad2307e48a641379db610abcf593edf | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 9f528a8e68327117837b5e28b096f52af4c26a05 ≤ v < 24e8e4523d3071bc5143b0db9127d511489f7b3b | CVEProject cvelistV5 (CNA) |
| Linux | Linux | b03c8099a738a04d2343547ae6a04e5f0f63d3fa ≤ v < f277e479eea3d1aa18bc712abe1d2bf3dece2e30 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | eec04ea119691e65227a97ce53c0da6b9b74b0b7 ≤ v < 860ca5e50f73c2a1cef7eefc9d39d04e275417f7 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | eec04ea119691e65227a97ce53c0da6b9b74b0b7 ≤ v < 554736b583f529ee159aa95af9a0cbc12b5ffc96 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | eec04ea119691e65227a97ce53c0da6b9b74b0b7 ≤ v < a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bd | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | All | CVEProject cvelistV5 (CNA) |
References and advisories
11- https://git.kernel.org/stable/c/f277e479eea3d1aa18bc712abe1d2bf3dece2e30
- https://git.kernel.org/stable/c/f618aeb6cad2307e48a641379db610abcf593edf
- https://git.kernel.org/stable/c/24e8e4523d3071bc5143b0db9127d511489f7b3b
- https://git.kernel.org/stable/c/9e5d99a4cf2e23c716b44862975548415fae5391
- https://git.kernel.org/stable/c/a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bd
- https://git.kernel.org/stable/c/554736b583f529ee159aa95af9a0cbc12b5ffc96
- https://git.kernel.org/stable/c/860ca5e50f73c2a1cef7eefc9d39d04e275417f7
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-03-12
- Last updated
- 2026-10-15
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.61%
Probability of exploitation in 30 days
49.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-476NULL Pointer Dereference