imPC@ndo IT

Tracker / CVE-2024-26954

CVE-2024-26954

High 8.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffset of smb2_create_req is smaller than Buffer offset of smb2_create_req, slab-out-of-bounds read can happen from smb2_open. This patch set the minimum value of the name offset to the buffer offset to validate name length of smb2_create_req().

Affected products and versions

linux linux_kernel · 5.15 → 6.1.119
linux linux_kernel · 6.2 → 6.7.12
linux linux_kernel · 6.8 → 6.8.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References