CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
In the Linux kernel, the following vulnerability has been resolved:
smb/client: avoid dereferencing rdata=NULL in smb2newreadreq()
This happens when called from SMB2read() while using rdma and reaching the rdmareadwritethreshold.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46686?
CVE-2024-46686 is classified with a high severity due to its potential impact on system stability and data integrity.
How do I fix CVE-2024-46686?
To mitigate CVE-2024-46686, update the Linux kernel to a version that includes the fix, such as 5.10.223-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-46686?
CVE-2024-46686 affects specific versions of the Linux kernel between 6.1.16 and 6.1.108, as well as versions 6.3 to 6.6.49.
Is CVE-2024-46686 exploitable remotely?
While the exact exploitation vectors are not detailed, vulnerabilities in the kernel generally pose risks that could be exploited remotely under certain conditions.
What types of systems are impacted by CVE-2024-46686?
CVE-2024-46686 impacts systems running specific versions of the Linux kernel, particularly those using SMB2 with RDMA support.