CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's SMB client implementation, specifically in the `receive_encrypted_standard()` function, which can lead to a memory leak due to improper handling of buffer allocation. If the number of compound PDUs exceeds the defined limit, the function fails to release the allocated memory, potentially impacting system performance and stability. System administrators and developers working with Linux kernel versions that utilize SMB should prioritize this fix to prevent resource exhaustion and ensure optimal operation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() receive_encrypted_standard() allocates next_buffer before checking whether the number of compound PDUs already reached MAX_COMPOUND. If the limit check fails, the function returns immediately and the newly allocated next_buffer is not assigned to server->smallbuf/server->bigbuf, making it leaked. Move the MAX_COMPOUND check before allocating next_buffer.