Critical severity9.1NVD Advisory· Published Feb 23, 2024· Updated Aug 4, 2026

CVE-2024-26594

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate mech token in session setup

If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.

LLM-synthesized narrative grounded in this CVE's description and references.

Linux/Kernelllm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <5.15.149
- (no CPE)range: 5.15
Linux/Ksmbdllm-fuzzy
osv-coords5 versions
pkg:linux/kernel pkg:deb/ubuntu/linux-oem-6.5 pkg:deb/ubuntu/[email protected]?arch=source&distro=mantic pkg:deb/ubuntu/[email protected]?arch=source&distro=mantic pkg:deb/ubuntu/[email protected]?arch=source&distro=mantic
>= 5.15.0, < 5.15.149+ 4 more
- (no CPE)range: >= 5.15.0, < 5.15.149
- (no CPE)range: < 6.5.0-1022.23
- (no CPE)range: < 6.5.0-1017.20
- (no CPE)range: < 6.5.0-1021.21
- (no CPE)range: < 6.5.0-1024.24