CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel's ksmbd component allows an attacker to exploit the FSCTL_DUPLICATE_EXTENTS_TO_FILE function, enabling unauthorized copying of file contents from a source file to a destination without proper access checks. This could lead to sensitive data exposure if an attacker can manipulate file handles with attribute access. Organizations using Linux systems with SMB capabilities should prioritize patching this vulnerability to mitigate the risk of data breaches.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLICATE_EXTENTS_TO_FILE passes the source file directly to vfs_clone_file_range() or vfs_copy_file_range() without checking the SMB access mask granted to the source handle. A handle opened with attribute access can consequently be used to copy file contents into an attacker-readable destination. Require FILE_READ_DATA on the source handle before either VFS operation, matching other ksmbd data-copy paths.