CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2_GLOBAL_CAP_ENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol specification. When Windows 10 detects this protocol violation, it disables encryption.

• CWE-319

• https://github.com/cifsd-team/ksmbd/issues/550Third Party Advisory
• https://github.com/cifsd-team/ksmbd/pull/551Patch, Third Party Advisory
• https://marc.info/?l=linux-kernel&m=163961726017023&w=2Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220107-0001/Third Party Advisory
• https://github.com/cifsd-team/ksmbd/issues/550Third Party Advisory
• https://github.com/cifsd-team/ksmbd/pull/551Patch, Third Party Advisory
• https://marc.info/?l=linux-kernel&m=163961726017023&w=2Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220107-0001/Third Party Advisory

Published

Dec 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45094Imprivata Privileged Access Management (formally Xton Privil…5.4
• CVE-2021-45095pep_sock_accept in net/phonet/pep.c in the Linux kernel thro…5.5
• CVE-2021-45096KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (…4.3
• CVE-2021-45097KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when in…5.5
• CVE-2021-45098An issue was discovered in Suricata before 6.0.4. It is poss…7.5
• CVE-2021-45099The addon.stdin service in addon-ssh (aka Home Assistant Com…8.8
• CVE-2021-45101An issue was discovered in HTCondor before 8.8.15, 9.0.x bef…8.1
• CVE-2021-45102An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9…8.8
• CVE-2021-45103An issue was discovered in HTCondor 9.0.x before 9.0.10 and …8.1
• CVE-2021-45104An issue was discovered in HTCondor 9.0.x before 9.0.10 and …7.4
• CVE-2021-45105Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding …5.9
• CVE-2021-45106A vulnerability has been identified in SICAM TOOLBOX II (All…6.5