VYPR
← All advisories
High severity8.3NVD Advisory· Published May 1, 2024· Updated Aug 4, 2026

CVE-2024-26952

CVE-2024-26952

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to ->Buffer offset to validate buffer length.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Linux/Kernel3 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15,<5.15.181
    • (no CPE)
    • (no CPE)range: 5.15
  • Linux/Ksmbdllm-fuzzy
  • osv-coords
    pkg:linux/kernel
    Range: >= 5.15.0, < 5.15.181

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.