CVE-2024-26811

2024-04-0800:00:00

ubuntu.com

cve-2024-26811

ksmbd

ipc response

memory overrun

slab-out-of-bounds

kernel server

AI Score

6.5

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: ksmbd:
validate payload size in ipc response If installing malicious ksmbd-tools,
ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd
should validate payload size of ipc response from ksmbd.mountd to avoid
memory overrun or slab-out-of-bounds. This patch validate 3 ipc response
that has payload.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-116.126UNKNOWN
ubuntu24.04noarchlinux< 6.8.0-38.38UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1065.71UNKNOWN
ubuntu24.04noarchlinux-aws< 6.8.0-1011.12UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1065.71~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< anyUNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1068.77UNKNOWN
ubuntu24.04noarchlinux-azure< 6.8.0-1010.10UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1068.77~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-6.5< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-116.126	UNKNOWN
ubuntu	24.04	noarch	linux	< 6.8.0-38.38	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1065.71	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< 6.8.0-1011.12	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1065.71~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1068.77	UNKNOWN
ubuntu	24.04	noarch	linux-azure	< 6.8.0-1010.10	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1068.77~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.5	< any	UNKNOWN