CVE-2024-26954: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slab-out-of-bounds in smbstrndupfromutf16()
If ->NameOffset of smb2createreq is smaller than Buffer offset of smb2createreq, slab-out-of-bounds read can happen from smb2open. This patch set the minimum value of the name offset to the buffer offset to validate name length of smb2createreq().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.96.2-2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26954?
CVE-2024-26954 is classified as a medium severity vulnerability due to the potential for slab-out-of-bounds reads.
How do I fix CVE-2024-26954?
To mitigate CVE-2024-26954, you should update your Linux kernel to a patched version such as 5.10.223-1, 5.10.226-1, 6.1.123-1, or any affected version that has been remediated.
What systems are affected by CVE-2024-26954?
The systems affected by CVE-2024-26954 include specific versions of the Debian Linux kernel packages.
What impact does CVE-2024-26954 have on systems?
CVE-2024-26954 can lead to potential exploitation through slab-out-of-bounds reads, which may result in unauthorized access to memory.
Is there a patch available for CVE-2024-26954?
Yes, there are patches available that have been integrated into newer versions of the Linux kernel to address CVE-2024-26954.