PT-2024-10375 · Linux+5 · Linux Kernel+5
Jordy Zomer
·
Published
2024-11-28
·
Updated
2025-10-03
·
CVE-2024-56626
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions are not explicitly specified in the provided descriptions.
Description:
The issue is related to an Out-of-Bounds Write in
ksmbd vfs stream write. It occurs when an offset from the client is a negative value, allowing data to be written outside the allocated buffer bounds. This happens when the 'vfs objects = streams xattr parameter' is set in ksmbd.conf.Recommendations:
Since specific affected versions are not provided, a general recommendation cannot be accurately tailored to each version. However, based on the information given, to resolve the issue, ensure that the
ksmbd vfs stream write function properly handles negative offset values from clients, and review the configuration of ksmbd.conf to avoid settings that could trigger this issue.Exploit
Fix
Out of bounds Read
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu