NetSight
IP …
high8.3

CVE-2024-26952

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-b…

Impact

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to ->Buffer offset to validate buffer length.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.181
from 5.16 before 6.1.119
from 6.2 before 6.6.32
from 6.7 before 6.7.12
from 6.8 before 6.8.3

Weakness classification

CWE-120CWE-125

References