REDHAT-BUG-2326531: Low severity red hat kernel-devel vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable.
The specific flaw exists within the handling of SMB2READ commands. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Reference: https://www.zerodayinitiative.com/advisories/ZDI-24-589/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2326531?
The severity of REDHAT-BUG-2326531 is considered significant as it allows for potential denial-of-service attacks.
How do I fix REDHAT-BUG-2326531?
To fix REDHAT-BUG-2326531, ensure that the Linux Kernel is updated to the latest version that includes the security patch.
Which systems are affected by REDHAT-BUG-2326531?
Systems with ksmbd enabled on the Linux Kernel are the only installations affected by REDHAT-BUG-2326531.
Can REDHAT-BUG-2326531 be exploited without authentication?
Yes, REDHAT-BUG-2326531 can be exploited by remote attackers without requiring any authentication.
What kind of attack can REDHAT-BUG-2326531 facilitate?
REDHAT-BUG-2326531 can facilitate denial-of-service conditions on vulnerable systems.