CVE-2024-56626

HIGH EPSS 19.5%
Published Dec 27, 20241y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Dec 27, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write An offset from client could be a negative value, It could allows to write data outside the bounds of the allocated buffer. Note that this issue is coming when setting 'vfs objects = streams_xattr parameter' in ksmbd.conf.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
19.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥5.15  –  <5.15.176
linuxlinux_kernel*≥5.16  –  <6.1.120
linuxlinux_kernel*≥6.2  –  <6.6.66
linuxlinux_kernel*≥6.7  –  <6.12.5
linuxlinux_kernel6.13any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/164d3597d26d9acff5d5b8bc3208bdcca942dd6a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1aea5c9470be2c7129704fb1b9562b1e3e0576f8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/313dab082289e460391c82d855430ec8a28ddf81
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8cd7490fc0f268883e86e840cda5311257af69ca
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c5797f195c67132d061d29c57a7c6d30530686f0
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/164d3597d26d9acff5d5b8bc3208bdcca942dd6a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1aea5c9470be2c7129704fb1b9562b1e3e0576f8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/313dab082289e460391c82d855430ec8a28ddf81
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8cd7490fc0f268883e86e840cda5311257af69ca
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c5797f195c67132d061d29c57a7c6d30530686f0
    Patch