CVE-2024-0565
Status: ModifiedHigh (7.4)—
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Base score: 7.4
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.00%
- Percentile among all scored CVEs: 80
- Score date: 10/1/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- CWE-191
- CWE-191
References
- https://access.redhat.com/errata/RHSA-2024:1188
- https://access.redhat.com/errata/RHSA-2024:1404
- https://access.redhat.com/errata/RHSA-2024:1532
- https://access.redhat.com/errata/RHSA-2024:1533
- https://access.redhat.com/errata/RHSA-2024:1607
- https://access.redhat.com/errata/RHSA-2024:1614
- https://access.redhat.com/errata/RHSA-2024:2093
- https://access.redhat.com/errata/RHSA-2024:2394
- https://access.redhat.com/security/cve/CVE-2024-0565
- https://bugzilla.redhat.com/show_bug.cgi?id=2258518
- https://www.spinics.net/lists/stable-commits/msg328851.html
- https://access.redhat.com/errata/RHSA-2024:1188
- https://access.redhat.com/errata/RHSA-2024:1404
- https://access.redhat.com/errata/RHSA-2024:1532
- https://access.redhat.com/errata/RHSA-2024:1533
- https://access.redhat.com/errata/RHSA-2024:1607
- https://access.redhat.com/errata/RHSA-2024:1614
- https://access.redhat.com/errata/RHSA-2024:2093
- https://access.redhat.com/errata/RHSA-2024:2394
- https://access.redhat.com/security/cve/CVE-2024-0565
- https://bugzilla.redhat.com/show_bug.cgi?id=2258518
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://security.netapp.com/advisory/ntap-20240223-0002/
- https://www.spinics.net/lists/stable-commits/msg328851.html
Raw JSON (NVD)
Show
{
"id": "CVE-2024-0565",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-0565",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-05-08T15:47:13.024655Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.4,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.5
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "Linux",
"product": "kernel",
"versions": [
{
"status": "affected",
"version": "4.19",
"lessThan": "5.10.211",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.11",
"lessThan": "5.15.150",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.16",
"lessThan": "6.1.69",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.2",
"lessThan": "6.6.8",
"versionType": "semver"
}
],
"packageName": "kernel",
"collectionURL": "https://git.kernel.org/pub/scm/linux/kernel",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::nfv",
"cpe:/a:redhat:enterprise_linux:8::realtime"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:4.18.0-513.24.1.rt7.326.el8_9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel-rt",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb",
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:4.18.0-513.24.1.el8_9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:8.6::crb",
"cpe:/o:redhat:rhel_eus:8.6::baseos",
"cpe:/o:redhat:rhev_hypervisor:4.4::el8"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:4.18.0-372.95.1.el8_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:8.8::crb",
"cpe:/o:redhat:rhel_eus:8.8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:4.18.0-477.51.1.el8_8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb",
"cpe:/a:redhat:enterprise_linux:9::nfv",
"cpe:/a:redhat:enterprise_linux:9::realtime",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:5.14.0-427.13.1.el9_4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb",
"cpe:/a:redhat:enterprise_linux:9::nfv",
"cpe:/a:redhat:enterprise_linux:9::realtime",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:5.14.0-427.13.1.el9_4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.2::appstream",
"cpe:/a:redhat:rhel_eus:9.2::crb",
"cpe:/o:redhat:rhel_eus:9.2::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:5.14.0-284.59.1.el9_2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.2::nfv",
"cpe:/a:redhat:rhel_eus:9.2::realtime"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:5.14.0-284.59.1.rt14.344.el9_2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel-rt",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:8.6::crb",
"cpe:/o:redhat:rhel_eus:8.6::baseos",
"cpe:/o:redhat:rhev_hypervisor:4.4::el8"
],
"vendor": "Red Hat",
"product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:4.18.0-372.95.1.el8_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.7.13-16",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/cluster-logging-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.7.13-7",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/cluster-logging-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v6.8.1-408",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/elasticsearch6-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.7.13-19",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/elasticsearch-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v1.0.0-480",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/elasticsearch-proxy-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.7.13-9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/elasticsearch-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v0.4.0-248",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/eventrouter-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v1.14.6-215",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/fluentd-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v6.8.1-431",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/kibana6-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v1.1.0-228",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/log-file-metric-exporter-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.8.1-471",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/logging-curator5-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v2.9.6-15",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/logging-loki-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.7.13-3",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/logging-view-plugin-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.7.13-27",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/loki-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v5.7.13-12",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/loki-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v0.1.0-527",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/lokistack-gateway-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v0.1.0-225",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/opa-openshift-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:logging:5.7::el8"
],
"vendor": "Red Hat",
"product": "RHOL-5.7-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "v0.28.1-57",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-logging/vector-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"packageName": "kernel-rt",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"packageName": "kernel-rt",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
}
]
}
],
"published": "2024-01-15T20:15:43.630",
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2024:1188",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1404",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1532",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1533",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1607",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1614",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:2093",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:2394",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-0565",
"tags": [
"Third Party Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258518",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "https://www.spinics.net/lists/stable-commits/msg328851.html",
"tags": [
"Mailing List",
"Patch"
],
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1188",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1404",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1532",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1533",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1607",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1614",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:2093",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:2394",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-0565",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258518",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240223-0002/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.spinics.net/lists/stable-commits/msg328851.html",
"tags": [
"Mailing List",
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"description": [
{
"lang": "en",
"value": "CWE-191"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-191"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service."
},
{
"lang": "es",
"value": "Se encontró un fallo de lectura de memoria fuera de los límites en receive_encrypted_standard en fs/smb/client/smb2ops.c en el subcomponente SMB Client en el kernel de Linux. Este problema se produce debido a un desbordamiento insuficiente de enteros en la longitud de memcpy, lo que provoca una denegación de servicio."
}
],
"lastModified": "2026-08-10T22:17:06.953",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFE668C1-15AF-4C7B-8071-8E46711B501B",
"versionEndExcluding": "6.7",
"versionStartIncluding": "6.1.36"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A0038DE-E183-4958-A6E3-CE3821FEAFBF"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E31AD4FC-436C-44AB-BCAB-3A0B37F69EE0"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C56C6E04-4F04-44A3-8DB8-93899903CFCF"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C78EDA4-8BE6-42FC-9512-49032D525A55"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32F2E5CA-13C6-4601-B530-D465CBF73D1C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:ontap_tools:-:*:*:*:*:vmware_vsphere:*:*",
"vulnerable": true,
"matchCriteriaId": "CBCC384C-5DF0-41AB-B17B-6E9B6CAE8065"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}