CVE-2024-22705
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-22705 is a cyber vulnerability affecting the Linux kernel before version 6.6.10. The vulnerability, classified as CWE-125 (Out-of-bounds Read), allows for an out-of-bounds access in the smb2_get_data_area_len function in fs/smb/server/smb2misc.c, due to mishandled data relationships. The affected products include Qtrc2o, ohMfk4, Qtrc2i, and several others. The vulnerability has a base severity rating of HIGH with a base score of 7.8 according to NIST. It requires low privileges and has no user interaction required. The attack vector is local, and it poses a high impact on both integrity and confidentiality. Remediation should involve updating the Linux kernel to version 6.6.10 or newer to mitigate the potential danger this vulnerability poses to organizations' systems and data. Note: Please note that the provided information is based on the given text and may not represent the complete context or details of the actual CVE vulnerability report.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions