CVE-2025-21748

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix integer overflows on 32 bit systems

On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

This vulnerability is rated as Moderate impact because exploitation is restricted to 32-bit architectures where an arithmetic wrap during IPC message allocation can cause memory corruption, rather than permitting remote compromise across typical deployments. Furthermore, supported Red Hat Enterprise Linux releases run exclusively on 64-bit platforms and do not enable the in-kernel SMB server module by default, significantly mitigating risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.