CVE-2024-26811
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
In the Linux kernel's ksmbd module, there is a lack of validation of IPC response payload size, which can lead to memory overrun or slab-out-of-bounds. The fix adds validation for three IPC responses with payload.
Risk Assessment
May lead to memory corruption, system crash, or potential privilege escalation.
Recommendation
Apply the Linux kernel update that includes the fix for this issue.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.