CVE-2024-57895

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The issue arises from ksmbd attempting to set atime and mtime via notify change without also setting ctime, resulting in a warning. This warning is triggered by the setattr copy function. The vulnerability is resolved by adding ATTR CTIME flags when setting mtime.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the setattr copy function until a patch is available. Restrict access to the ksmbd module to minimize the risk of exploitation. Avoid using the notify change function in the affected API endpoint until the issue is resolved.