Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26811
HistoryApr 08, 2024 - 12:05 p.m.

CVE-2024-26811

2024-04-0812:05:46
redhat.com
access.redhat.com
9
linux kernel
vulnerability
ksmbd
ipc response
memory overrun
slab-out-of-bounds
patch

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%