CVE-2024-56626

ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write

State: Published
Severity: 8.8 High
Published: Dec 27, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write

An offset from client could be a negative value, It could allows to write data outside the bounds of the allocated buffer. Note that this issue is coming when setting 'vfs objects = streams_xattr parameter' in ksmbd.conf.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before 1aea5c9470be2c7129704fb1b9562b1e3e0576f8Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 8cd7490fc0f268883e86e840cda5311257af69caAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 164d3597d26d9acff5d5b8bc3208bdcca942dd6aAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before c5797f195c67132d061d29c57a7c6d30530686f0Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 313dab082289e460391c82d855430ec8a28ddf81Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.176 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.66 through 6.6.Not affected 6.12.5 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before 1aea5c9470be2c7129704fb1b9562b1e3e0576f8Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 8cd7490fc0f268883e86e840cda5311257af69caAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 164d3597d26d9acff5d5b8bc3208bdcca942dd6aAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before c5797f195c67132d061d29c57a7c6d30530686f0Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 313dab082289e460391c82d855430ec8a28ddf81Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.176 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.66 through 6.6.*Not affected
6.12.5 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.