In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix potencial out-of-bounds when buffer offset is invalid
I found potencial out-of-bounds when buffer offset fields of a few requests
is invalid. This patch set the minimum value of buffer offset field to
->Buffer offset to validate buffer length.
References
Configurations
Configuration 1 (hide)
|
History
03 Jul 2024, 01:50
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-125 |
25 May 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 May 2024, 19:14
Type | Values Removed | Values Added |
---|---|---|
First Time |
Linux linux Kernel
Linux |
|
References | () https://git.kernel.org/stable/c/0c5541b4c980626fa3cab16ba1a451757778bbb5 - Patch | |
References | () https://git.kernel.org/stable/c/2dcda336b6e80b72d58d30d40f2fad9724e5fe63 - Patch | |
References | () https://git.kernel.org/stable/c/c6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753da - Patch | |
CWE | CWE-120 | |
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
01 May 2024, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-01 06:15
Updated : 2024-07-03 01:50
NVD link : CVE-2024-26952
Mitre link : CVE-2024-26952
CVE.ORG link : CVE-2024-26952
JSON object : View
Products Affected
linux
- linux_kernel