Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-26811
HistoryApr 08, 2024 - 10:15 a.m.

CVE-2024-26811

2024-04-0810:15:08
Debian Security Bug Tracker
security-tracker.debian.org
7
linux kernel
ksmbd
vulnerability
ipc response
payload size

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%