CVE-2024-26828

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a fix for an underflow in the parse server interfaces() function. In this loop, the code checks if the size left is greater than the minimum size needed after each item. However, the problem arises because bytes left is of type ssize t while sizeof() is of type size t, leading to type promotion and an unsigned comparison. This results in the loop continuing instead of ending when there are negative bytes left.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.