CVE-2024-26828CWE-191

CVE-2024-26828

Critical · published April 17, 2024

CVSS v3.1
9.4
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check

if the size_left is greater than the minimum size we need. However,

the problem is that "bytes_left" is type ssize_t while sizeof() is type

size_t. That means that because of type promotion, the comparison is

done as an unsigned and if we have negative bytes left the loop

continues instead of ending.

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00754 · 54.6th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2024-04-17T14:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 4.18, < 6.1.796.1.79
linux/linux_kernel≥ 6.2, < 6.6.186.6.18
linux/linux_kernel≥ 6.7, < 6.7.66.7.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 17 APR 09:43Z
    cifs: fix underflow in parse_server_interfaces()
    cvelistv5