PT-2024-21596 · Linux+5 · Linux Kernel+5
Xuanzhe Yu
·
Published
2024-03-16
·
Updated
2026-05-26
·
CVE-2024-26954
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A slab-out-of-bounds read can occur in the Linux kernel when the
->NameOffset of smb2 create req is smaller than the Buffer offset of smb2 create req. This issue is resolved by setting the minimum value of the name offset to the buffer offset to validate the name length of smb2 create req(). The vulnerability is related to the ksmbd component and the smb strndup from utf16() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
LPE
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu