CVE-2025-21946

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bounds in parse_sec_desc()

If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it included subauth array size.

This vulnerability does not impact Red Hat Enterprise Linux environments because the in-kernel SMB server module is not built or supported in shipped kernels. Red Hat provides SMB file-sharing services through userspace implementations like Samba rather than the in-kernel ksmbd driver. Consequently, the affected code is not present and cannot be triggered on Red Hat supported platforms.