Vulnerability · Published Mar 12, 2025 · Assigned by Linux
CVE-2025-21844smb: client: Add check for next_buffer in receive_encrypted_standard()
High 7.5
In plain English
A high-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 50.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return value of cifs_buf_get() and cifs_small_buf_get() in receive_encrypted_standard() to prevent null pointer dereference.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.133-1 | DEBIAN-CVE-2025-21844 |
| Debian:12 | linux | 6.1.133-1 | DSA-5900-1 |
| Debian:13 | linux | 6.12.17-1 | DEBIAN-CVE-2025-21844 |
| Debian:14 | linux | 6.12.17-1 | DEBIAN-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux | 5.15.0-140.150 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux | 6.8.0-78.78 | USN-7703-1 |
| Ubuntu:24.04:LTS | linux | 6.8.0-78.78 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1084.91 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1035.37 | USN-7703-1 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1035.37 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1035.37~22.04.1 | USN-7703-2 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1035.37~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1089.98 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1034.39 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1015.15~24.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1034.39~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1089.98.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1022.23 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1083.92 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1036.38 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1036.38 | USN-7703-2 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | 6.11.0-1015.15~24.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1036.38~22.04.1 | USN-7703-2 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1036.38~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1081.87 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1032.36 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1032.36 | USN-7703-4 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1066.74 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1019.21 | USN-7703-2 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1019.21 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-26.26~24.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-78.78~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-78.78~22.04.1 | USN-7703-4 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1076.79 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1033.33 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1033.33 | USN-7703-2 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1033.33~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1033.33~22.04.1 | USN-7703-2 |
| Ubuntu:24.04:LTS | linux-intel | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1079.85 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1080.85 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-140.150 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-78.78.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-78.78.1 | USN-7703-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1014.15~24.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-78.78.1~22.04.1 | USN-7703-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-78.78.1~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1078.79 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1035.38 | USN-7703-4 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1035.38 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | 6.11.0-1010.10 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1035.38~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1035.38~22.04.1 | USN-7703-4 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1035.38.1 | USN-7703-4 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1035.38.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1037.37 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | 6.8.0-1009.9 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1026.26 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | 6.11.0-1022.22 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1081.87 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1032.33 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1032.33 | USN-7703-3 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1032.33~22.04.1 | USN-7703-3 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1032.33~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1078.81 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1035.39 | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1035.39 | USN-7703-4 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-78.78~22.04.1 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2025-21844 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1017.18 | UBUNTU-CVE-2025-21844 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1050.54 | UBUNTU-CVE-2025-21844 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | b03c8099a738a04d2343547ae6a04e5f0f63d3fa – before f277e479eea3d1aa18bc712abe1d2bf3dece2e30858e73ff25639a0cc1f6f8d2587b62c045867e41 – before f618aeb6cad2307e48a641379db610abcf593edf9f528a8e68327117837b5e28b096f52af4c26a05 – before 24e8e4523d3071bc5143b0db9127d511489f7b3b534733397da26de0303057ce0b93a22bda150365 – before 9e5d99a4cf2e23c716b44862975548415fae5391eec04ea119691e65227a97ce53c0da6b9b74b0b7 – before a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bdeec04ea119691e65227a97ce53c0da6b9b74b0b7 – before 554736b583f529ee159aa95af9a0cbc12b5ffc96eec04ea119691e65227a97ce53c0da6b9b74b0b7 – before 860ca5e50f73c2a1cef7eefc9d39d04e275417f75.10.211 – before 5.10.235 |
| Linux | Linux | 6.7 |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://git.kernel.org/stable/c/f277e479eea3d1aa18bc712abe1d2bf3dece2e30
- https://git.kernel.org/stable/c/f618aeb6cad2307e48a641379db610abcf593edf
- https://git.kernel.org/stable/c/24e8e4523d3071bc5143b0db9127d511489f7b3b
- https://git.kernel.org/stable/c/9e5d99a4cf2e23c716b44862975548415fae5391
- https://git.kernel.org/stable/c/a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bd
- https://git.kernel.org/stable/c/554736b583f529ee159aa95af9a0cbc12b5ffc96
- https://git.kernel.org/stable/c/860ca5e50f73c2a1cef7eefc9d39d04e275417f7
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html