CVE-2024-26811

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate payload size in ipc response

If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 88b7f1143b15b29cccb8392b4f38e75b7bb3e300; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 51a6c2af9d20203ddeeaf73314ba8854b38d01bd; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < a637fabac554270a851033f5ab402ecb90bc479c; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 76af689a45aa44714b46d1a7de4ffdf851ded896; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < a677ebd8ca2f2632ccdecbad7b87641274e15aac
LinuxLinux5.15

References

Timeline

Published
Apr 8, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-268125.5In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where CVE-2024-268135.5In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SET_IRCVE-2024-268145.5In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Block calling interrupt handler without trigger The eventCVE-2024-268155.5In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check taprio_parseCVE-2024-268165.5In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CCVE-2024-268175.5In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc instead of kzalloc to avoid integer overflow This uCVE-2024-268185.5In the Linux kernel, the following vulnerability has been resolved: tools/rtla: Fix clang warning about mount_point var size clang is repoCVE-2024-26826.1A vulnerability classified as problematic has been found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the fCVE-2024-268205.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed ICVE-2024-268225.5In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts WhCVE-2024-268235.5In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems WhileCVE-2024-268245.5In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path W
CVE-2024-26811: Medium severity, CVSS 5.5 | Vulnix