DEBIAN-CVE-2024-22705

🗓️ 23 Jan 2024 11:15:09Reported by GoogleType

osv🔗 osv.dev👁 1 Views

ksmbd in the Linux kernel before 6.6.10 has an out-of-bounds access in smb2_get_data_area_len caused by mishandled relation between Name data and CreateContexts data.

Reporter	Title	Published	Views	Family All 81
AstraLinux	Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the smb2_get_data_area_len function (fs/smb/server/smb2misc.c) in the Linux file system KSMBD kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Jan 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-22705 affecting package kernel for versions less than 5.15.148.1-1	25 Feb 202403:00	–	cbl_mariner
Circl	CVE-2024-22705	23 Jan 202412:31	–	circl
CNNVD	Linux kernel security vulnerabilities	23 Jan 202400:00	–	cnnvd
CVE	CVE-2024-22705	23 Jan 202400:00	–	cve
Cvelist	CVE-2024-22705	23 Jan 202400:00	–	cvelist
Debian CVE	CVE-2024-22705	23 Jan 202400:00	–	debiancve
EUVD	EUVD-2024-20237	3 Oct 202520:07	–	euvd
Microsoft CVE	An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.	30 Jan 202408:00	–	mscve