CVE-2024-26822

MEDIUM

Linux Kernel - Incorrect User ID Assignment in SMB Client Multiuser Automounts

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the values from the parent mount.

References (5)

Core 5

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 13.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (21)
linux/Kernel < 5.15.201linux
linux/Kernel 5.16.0 - 6.1.164linux
linux/Kernel 6.2.0 - 6.7.6linux
Linux/Linux < 6.2
Linux/Linux 5.15.124 - 5.15.201
Linux/Linux 5.15.201 - 5.15.*
Linux/Linux 6.1.164 - 6.1.*
Linux/Linux 6.1.54 - 6.1.164
Linux/Linux 6.2
Linux/Linux 6.6.18 - 6.6.*
... and 11 more
Published Apr 17, 2024
Tracked Since Feb 18, 2026