by Kastro CVE-2024-26811
Linux Linux — ksmbd: validate payload size in ipc response
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.
Affected
ProductAffectedFixed inSource
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 88b7f1143b15b29cccb8392b4f38e75b7bb3e30088b7f1143b15b29cccb8392b4f38e75b7bb3e300CNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 51a6c2af9d20203ddeeaf73314ba8854b38d01bd51a6c2af9d20203ddeeaf73314ba8854b38d01bdCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < a637fabac554270a851033f5ab402ecb90bc479ca637fabac554270a851033f5ab402ecb90bc479cCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 76af689a45aa44714b46d1a7de4ffdf851ded89676af689a45aa44714b46d1a7de4ffdf851ded896CNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < a677ebd8ca2f2632ccdecbad7b87641274e15aaca677ebd8ca2f2632ccdecbad7b87641274e15aacCNA
Linux5.155.15.157CNA
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial