CVE-2024-46795

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference error in the ksmbd component of the Linux kernel. This error occurs when a reused connection is used for a binding session, and the conn->binding remains true, causing generate preauth hash() not to set sess->Preauth HashValue, which is then used as a material to create an encryption key in ksmbd gen smb311 encryptionkey(). This results in a null pointer dereference error from crypto shash update(). The vulnerability can lead to a kernel NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.