CVE-2024-26811

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the ksmbd component in the Linux kernel, where the ksmbd.mountd can return an invalid IPC response to the ksmbd kernel server, potentially leading to memory overrun or slab-out-of-bounds. The vulnerability can be exploited if malicious ksmbd-tools are installed. The patch validates the payload size of IPC responses from ksmbd.mountd to prevent such issues. There is no information about the estimated number of potentially affected devices or real-world incidents.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.