GHSA-pj7f-5c59-qj9r

GHSA-pj7f-5c59-qj9r PUBLISHED CVSS 8.699999809265137 HIGH

Record from GitHub Advisory Database · Published April 29, 2022

The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.

Risk scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Timeline

Apr 29, 2022 CVE Published
Apr 9, 2026 Distribution Patch (5 in total, the first dated here)
Apr 9, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-pj7f-5c59-qj9r
vulnetix vdb fixes GHSA-pj7f-5c59-qj9r

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-pj7f-5c59-qj9r/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 2 more

Look up in the Resolve Platform →