CVE-2024-56627 — Out-of-bounds Read in Linux
Severity
7.1HIGHNVD
OSV8.8OSV7.8
EPSS
0.0%
top 99.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 27
Latest updateMay 26
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
An offset from client could be a negative value, It could lead
to an out-of-bounds read from the stream_buf.
Note that this issue is coming when setting
'vfs objects = streams_xattr parameter' in ksmbd.conf.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages8 packages
▶CVEListV5linux/linux0626e6641f6b467447c81dd7678a69c66f7746cf — 6bd1bf0e8c42f10a9a9679a4c103a9032d30594d+5