CVE-2024-26952

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

State: Published
Severity: 8.3 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to ->Buffer offset to validate buffer length.

Scores

CVSS	Score	Vector	Source
3.1	8.3 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H	Linux
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before 480469f145e5abf83361e608734e421b7d99693dAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before ad6480c9a5d884e2704adc51d69895d93339176cAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 39bdc4197acf2ed13269167ccf093ee28cfa2a4eAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 2dcda336b6e80b72d58d30d40f2fad9724e5fe63Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 0c5541b4c980626fa3cab16ba1a451757778bbb5Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before c6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753daAffected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.181 through 5.15.Not affected 6.1.119 through 6.1.Not affected 6.6.32 through 6.6.Not affected 6.7.12 through 6.7.Not affected 6.8.3 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before 480469f145e5abf83361e608734e421b7d99693dAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before ad6480c9a5d884e2704adc51d69895d93339176cAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 39bdc4197acf2ed13269167ccf093ee28cfa2a4eAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 2dcda336b6e80b72d58d30d40f2fad9724e5fe63Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 0c5541b4c980626fa3cab16ba1a451757778bbb5Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before c6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753daAffected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.181 through 5.15.*Not affected
6.1.119 through 6.1.*Not affected
6.6.32 through 6.6.*Not affected
6.7.12 through 6.7.*Not affected
6.8.3 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.