An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 23, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1020-oracle-64kUpgrade linux-image-6.5.0-1014-raspiUpgrade linux-image-6.5.0-27-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-6.5.0-1018-azure-fdeUpgrade linux-image-starfiveUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-6.5.0-27-genericUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.1.0-1033-oemUpgrade linux-image-6.5.0-1017-awsUpgrade linux-image-raspiUpgrade linux-image-6.5.0-27-lowlatency-64kUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-27-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1019-oemUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-6.5.0-1018-azureUpgrade linux-image-6.5.0-1011-starfiveUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1013-laptopUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1017-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-6.5.0-1020-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-102-genericUpgrade linux-image-generic | Feb 16, 2024 | Jan 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub