CVE-2021-45100

ALTO 7.5CVE-2021-45100 · Published 16/12/2021 · updated 17/06/2026

En resumen

CVE-2021-45100 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a ksmbd (ksmbd project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.91%, mayor que el 60.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
ksmbd ksmbd_project	`≤ 3.4.2`	No fix yet

Description

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2_GLOBAL_CAP_ENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol specification. When Windows 10 detects this protocol violation, it disables encryption.

References

cifsd-team/ksmbd · Third Party Advisory
cifsd-team/ksmbd#551 · Patch
marc.info · Third Party Advisory
security.netapp.com/advisory/ntap-20220107-0001 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free