PT-2024-10375
CVE-2024-56626
·
Published
2024-11-28
·
Updated
2025-10-03
Description by
CVSS 2.0
9.4
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions are not explicitly specified in the provided descriptions.
Description:
The issue is related to an Out-of-Bounds Write in
ksmbd vfs stream write. It occurs when an offset from the client is a negative value, allowing data to be written outside the allocated buffer bounds. This happens when the 'vfs objects = streams xattr parameter' is set in ksmbd.conf.Recommendations:
Since specific affected versions are not provided, a general recommendation cannot be accurately tailored to each version. However, based on the information given, to resolve the issue, ensure that the
ksmbd vfs stream write function properly handles negative offset values from clients, and review the configuration of ksmbd.conf to avoid settings that could trigger this issue.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾