CVE-2024-26811

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26811
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd Patch
https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 Patch
https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 Patch
https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c Patch
https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac Patch
https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd Patch
https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 Patch
https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 Patch
https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c Patch
https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
History

27 Mar 2025, 21:37

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd - () https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd - Patch
References () https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 - () https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 - Patch
References () https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 - () https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 - Patch
References () https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c - () https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c - Patch
References () https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac - () https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:-:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-787

21 Nov 2024, 09:03

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd - () https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd -
References () https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 - () https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 -
References () https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 - () https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 -
References () https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c - () https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c -
References () https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac - () https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac -

28 Apr 2024, 12:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6XCNJZBDMGJXRIKLGKM4RRJU4XCHPX62/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LG6L4FXO4WNWUM6W7USOH2YTRVWREM3V/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RO3RO34MLQ6WT3A7O6STQUVXW43N6W3K/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • () https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 -

14 Apr 2024, 04:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6XCNJZBDMGJXRIKLGKM4RRJU4XCHPX62/ -

13 Apr 2024, 04:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LG6L4FXO4WNWUM6W7USOH2YTRVWREM3V/ -

13 Apr 2024, 02:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RO3RO34MLQ6WT3A7O6STQUVXW43N6W3K/ -

10 Apr 2024, 15:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd -
  • () https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 -
  • () https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c -

08 Apr 2024, 18:48

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: ksmbd: validar el tamaño del payload en la respuesta de ipc Si instala herramientas ksmbd maliciosas, ksmbd.mountd puede devolver una respuesta de ipc no válida al servidor del kernel de ksmbd. ksmbd debe validar el tamaño del payload de la respuesta ipc de ksmbd.mountd para evitar el desbordamiento de la memoria o los límites. Este parche valida 3 respuestas ipc que tienen payload.

08 Apr 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-08 10:15

Updated : 2025-03-27 21:37

NVD link : CVE-2024-26811

Mitre link : CVE-2024-26811

CVE.ORG link : CVE-2024-26811

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write