CVE-2024-56626
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 27, 2024
Updated: Jan 16, 2025
CWE ID 787
Summary
CVE-2024-56626 is a vulnerability discovered in the Linux kernel affecting the ksmbd component. This issue involves an out-of-bounds write vulnerability in the function ksmbd_vfs_stream_write. If a client provides a negative offset value, data can be written outside the bounds of the allocated buffer, potentially leading to unintended consequences. This vulnerability is triggered when the 'vfs objects = streams_xattr' parameter is set in the ksmbd.conf configuration file. This weakness has been resolved in the latest Linux kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.