CVE-2021-45100
kernel: ksmbd server communicates in cleartext even though encryption has been enabled due to a violation of the SMB protocol specification
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 14, 2021
Updated · November 22, 2025
Description
An unexpected, non-encrypted communication flaw in the Linux kernel's ksmbd (Samba 3 protocol implementation) subsystem was found in the way when user set flag SMB2_GLOBAL_CAP_ENCRYPTION using the SMB 3.1.1 protocol. If during connection flag SMB2_GLOBAL_CAP_ENCRYPTION being used by remote user, then for some conditions the connection becomes unencrypted.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-319 · Cleartext Transmission of Sensitive Information