Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.18, < 6.1.79 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/7190353835b4a219abb70f90b06cdcae97f11512Patch
- https://git.kernel.org/stable/c/cffe487026be13eaf37ea28b783d9638ab147204Patch
- https://git.kernel.org/stable/c/df2af9fdbc4ddde18a3371c4ca1a86596e8be301Patch
- https://git.kernel.org/stable/c/f7ff1c89fb6e9610d2b01c1821727729e6609308Patch
- https://git.kernel.org/stable/c/7190353835b4a219abb70f90b06cdcae97f11512Patch
- https://git.kernel.org/stable/c/cffe487026be13eaf37ea28b783d9638ab147204Patch
- https://git.kernel.org/stable/c/df2af9fdbc4ddde18a3371c4ca1a86596e8be301Patch
- https://git.kernel.org/stable/c/f7ff1c89fb6e9610d2b01c1821727729e6609308Patch
FAQ
What is CVE-2024-26828?
CVE-2024-26828 is a vulnerability with a CVSS score of 9.4 (CRITICAL). In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size...
How severe is CVE-2024-26828?
CVE-2024-26828 has been rated CRITICAL with a CVSS base score of 9.4/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-26828?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.