Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-26811 Details

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: kernel.orgCVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd	kernel.org	Patch
https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896	kernel.org	Patch
https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300	kernel.org	Patch
https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c	kernel.org	Patch
https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac	kernel.org	Patch
https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd	CVE	Patch
https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896	CVE	Patch
https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300	CVE	Patch
https://git.kernel.org/stable/c/a637fabac554270a851033f5ab402ecb90bc479c	CVE	Patch
https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac	CVE	Patch
https://lists.fedoraproject.org/archives/list/[email protected]/message/6XCNJZBDMGJXRIKLGKM4RRJU4XCHPX62/	CVE
https://lists.fedoraproject.org/archives/list/[email protected]/message/LG6L4FXO4WNWUM6W7USOH2YTRVWREM3V/	CVE
https://lists.fedoraproject.org/archives/list/[email protected]/message/RO3RO34MLQ6WT3A7O6STQUVXW43N6W3K/	CVE

see all 13 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]

Affected Products

Product	Versions
linux linux kernel	< 6.9 6.9 - 6.9 rc1 6.9 rc2
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.9:-:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc2:::::: Remediation No remediation found in references.

Change History

15 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Nov 4, 2025	CVE Modified	CVE
Nov 4, 2025	CVE Modified	CVE
Mar 27, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 29, 2024	CVE Modified	kernel.org
May 14, 2024	CVE Modified	kernel.org
Apr 28, 2024	CVE Modified	kernel.org
Apr 14, 2024	CVE Modified	kernel.org
Apr 13, 2024	CVE Modified	kernel.org
Apr 13, 2024	CVE Modified	kernel.org
Apr 10, 2024	CVE Modified	kernel.org
Apr 8, 2024	New CVE Received	kernel.org