PT-2024-9957 · Linux+4 · Linux Kernel+4

Chao Ma

·

Published

2024-02-19

·

Updated

2025-10-03

·

CVE-2024-26811

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to the ksmbd component in the Linux kernel, where the ksmbd.mountd can return an invalid IPC response to the ksmbd kernel server, potentially leading to memory overrun or slab-out-of-bounds. The vulnerability can be exploited if malicious ksmbd-tools are installed. The patch validates the payload size of IPC responses from ksmbd.mountd to prevent such issues. There is no information about the estimated number of potentially affected devices or real-world incidents.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125CWE-787CWE-119

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
AZL-59255
AZL-59267
BDU:2025-00069
CVE-2024-26811
DSA-5658-1
OESA-2024-1620
OESA-2024-1621
OESA-2024-1622
OESA-2024-1647
USN-6893-1
USN-6893-2
USN-6893-3
USN-6898-1
USN-6898-2
USN-6898-3
USN-6898-4
USN-6917-1
USN-6918-1
USN-6919-1
USN-6927-1
USN-7019-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Ubuntu