CVE-2024-26828

2024-04-1700:00:00

ubuntu.com

linux kernel

cve-2024-26828

vulnerability

cifs

parse_server_interfaces()

underflow

buffer

bytes_left

integer overflow

AI Score

6.9

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: cifs:
fix underflow in parse_server_interfaces() In this loop, we step through
the buffer and after each item we check if the size_left is greater than
the minimum size we need. However, the problem is that “bytes_left” is type
ssize_t while sizeof() is type size_t. That means that because of type
promotion, the comparison is done as an unsigned and if we have negative
bytes left the loop continues instead of ending.

Bugs

<https://bugzilla.suse.com/show_bug.cgi?id=1223084>

Notes

Author	Note
	Priority reason: This issue is an integer overflow leading to a potential out of bounds write.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-189.209UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-116.126UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-44.44UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1128.138UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1065.71UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1065.71~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< anyUNKNOWN
ubuntu22.04noarchlinux-aws-6.5< 6.5.0-1023.23~22.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1133.140UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1068.77UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-189.209	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-116.126	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-44.44	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1128.138	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1065.71	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1065.71~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< any	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< 6.5.0-1023.23~22.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1133.140	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1068.77	UNKNOWN