CVE-2024-26594

CriticalCVSS 9.1

Published: 23/02/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

78.39%

100th percentile - higher than 100% of all known CVEs

Summary

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup. If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.

Risk Assessment

The risk involves potential unauthorized access to SMB sessions, which could lead to data integrity compromise.

Recommendation

It is recommended to update the Linux kernel to a version containing the fix.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.