CVE-2024-26954

HIGH

Linux Kernel 5.15-6.1.118, 6.2-6.6.31, 6.7-6.7.11, 6.8-6.8.2 - Out-of-bounds Read in SMB2 Create Request Name Validation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffset of smb2_create_req is smaller than Buffer offset of smb2_create_req, slab-out-of-bounds read can happen from smb2_open. This patch set the minimum value of the name offset to the buffer offset to validate name length of smb2_create_req().

Scores

CVSS v3 7.1
EPSS 0.0025
EPSS Percentile 16.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (17)
linux/Kernel 5.15.0 - 6.1.119linux
linux/Kernel 6.2.0 - 6.6.32linux
linux/Kernel 6.7.0 - 6.7.12linux
linux/Kernel 6.8.0 - 6.8.3linux
Linux/Linux < 5.15
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 3b8da67191e938a63d2736dabb4ac5d337e5de57
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 4f97e6a9d62cb1fce82fbf4baff44b83221bc178
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 9e4937cbc150f9d5a9b5576e1922ef0b5ed2eb72
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - a80a486d72e20bd12c335bcd38b6e6f19356b0aa
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - d70c2e0904ab3715c5673fd45788a464a246d1db
... and 7 more
Published May 01, 2024
Tracked Since Feb 18, 2026