CVE-2024-26936: ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate request buffer size in smb2allocaterspbuf()
The response buffer should be allocated in smb2allocaterspbuf before validating request. But the fields in payload as well as smb2 header is used in smb2allocaterspbuf(). This patch add simple buffer size validation to avoid potencial out-of-bounds in request buffer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26936?
CVE-2024-26936 has been classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-26936?
To fix CVE-2024-26936, update your Linux kernel to the remedied versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, or 6.12.12-1.
What components are affected by CVE-2024-26936?
CVE-2024-26936 affects the ksmbd component of the Linux kernel.
What could an attacker do with CVE-2024-26936?
An attacker could potentially exploit CVE-2024-26936 to bypass request buffer size validation.
Is there a workaround for CVE-2024-26936?
There are no known workarounds for CVE-2024-26936; updating to a patched kernel version is recommended.