PT-2024-10375
CVE-2024-56626
·
تاريخ النشر
2024-11-28
·
تاريخ التحديث
2025-10-03
الوصف من
CVSS 2.0
9.4
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions are not explicitly specified in the provided descriptions.
Description:
The issue is related to an Out-of-Bounds Write in
ksmbd vfs stream write. It occurs when an offset from the client is a negative value, allowing data to be written outside the allocated buffer bounds. This happens when the 'vfs objects = streams xattr parameter' is set in ksmbd.conf.Recommendations:
Since specific affected versions are not provided, a general recommendation cannot be accurately tailored to each version. However, based on the information given, to resolve the issue, ensure that the
ksmbd vfs stream write function properly handles negative offset values from clients, and review the configuration of ksmbd.conf to avoid settings that could trigger this issue.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾