NetSight
IP …
high8.2

CVE-2024-26936

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() The response buffer should b…

Impact

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() The response buffer should be allocated in smb2_allocate_rsp_buf before validating request. But the fields in payload as well as smb2 header is used in smb2_allocate_rsp_buf(). This patch add simple buffer size validation to avoid potencial out-of-bounds in request buffer.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.159
from 5.16 before 6.1.88
from 6.2 before 6.6.29
from 6.7 before 6.8.8
Version 6.9

Weakness classification

CWE-120

References