CVE-2024-26952

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to ->Buffer offset to validate buffer length.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 480469f145e5abf83361e608734e421b7d99693d; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < ad6480c9a5d884e2704adc51d69895d93339176c; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 39bdc4197acf2ed13269167ccf093ee28cfa2a4e; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 2dcda336b6e80b72d58d30d40f2fad9724e5fe63; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 0c5541b4c980626fa3cab16ba1a451757778bbb5; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < c6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753da
LinuxLinux5.15
linuxlinux_kernel>= 1da177e4c3f4, < 2dcda336b6e8

References

Timeline

Published
May 1, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-269535.5In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reoCVE-2024-269547.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffCVE-2024-269557.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent kernel bug at submit_bh_wbc() Fix a bug where nilfs_geCVE-2024-269567.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappinCVE-2024-269577.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with CVE-2024-269587.8In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the fCVE-2024-269595.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix btnxpuart_close Fix scheduling while atomic CVE-2024-26964.8The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which could allow high privCVE-2024-269607.0In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There wCVE-2024-269617.8In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del CVE-2024-269625.5In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurreCVE-2024-269635.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is ena
CVE-2024-26952: High severity, CVSS 7.8 | Vulnix