Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.

INFO

Published Date :

2024-04-08T10:02:18.184Z

Last Modified :

2025-11-04T22:06:01.323Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-26811 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-26811.

URL Resource
https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd cve-icon cve-icon
https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896 cve-icon cve-icon
https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300 cve-icon cve-icon
https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c cve-icon cve-icon
https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/6XCNJZBDMGJXRIKLGKM4RRJU4XCHPX62/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/LG6L4FXO4WNWUM6W7USOH2YTRVWREM3V/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/RO3RO34MLQ6WT3A7O6STQUVXW43N6W3K/ cve-icon
https://lore.kernel.org/linux-cve-announce/2024040822-CVE-2024-26811-f7f5@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26811 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26811 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact