In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate payload size in ipc response
If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 8, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-generic-64k | Jul 12, 2024 | Apr 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Apr 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub