Buffer overflow in Linux kernel - CVE-2024-26811

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU88543

Buffer overflow in Linux kernel - CVE-2024-26811

Published: April 15, 2024


Vulnerability identifier: #VU88543
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-26811
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error when installing malicious ksmbd-tools. A local user can force the ksmbd.mountd to return invalid ipc response to ksmbd kernel server,  trigger memory corruption and execute arbitrary code on the target system.


Affected software

Linux kernel
Debian Linux
Ubuntu
openEuler
Fedora
kernel-debuginfo
kernel
kernel-tools-debuginfo
kernel-debugsource
perf-debuginfo
kernel-tools
kernel-devel
bpftool
kernel-source
kernel-headers
perf
bpftool-debuginfo
python3-perf-debuginfo
python3-perf
kernel-tools-devel
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-5.15.0-116-generic-lpae (Ubuntu package)
linux-image-5.15.0-116-lowlatency (Ubuntu package)
linux-image-5.15.0-116-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-116-generic-64k (Ubuntu package)
linux-image-5.15.0-116-generic (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.15.0-1035-xilinx-zynqmp (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.15.0-1048-gkeop (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.15.0-1058-ibm (Ubuntu package)
linux-image-5.15.0-1058-raspi (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-5.15.0-1060-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1060-nvidia (Ubuntu package)
linux-image-5.15.0-1060-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1062-kvm (Ubuntu package)
linux-image-5.15.0-1062-gke (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1063-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1064-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1065-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.15.0-1065-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1068-azure (Ubuntu package)
linux-image-5.15.0-1068-azure-fde (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux (Debian package)
linux-image-6.8.0-38-generic (Ubuntu package)
linux-image-6.8.0-38-generic-64k (Ubuntu package)
linux-image-generic-64k-hwe-24.04 (Ubuntu package)
linux-image-generic-hwe-24.04 (Ubuntu package)
linux-image-virtual-hwe-24.04 (Ubuntu package)
linux-image-6.8.0-38-lowlatency-64k (Ubuntu package)
linux-image-6.8.0-38-lowlatency (Ubuntu package)
linux-image-6.8.0-1006-gke (Ubuntu package)
linux-image-6.8.0-1007-raspi (Ubuntu package)
linux-image-6.8.0-1007-intel (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-6.8.0-1008-oem (Ubuntu package)
linux-image-6.8.0-1008-ibm (Ubuntu package)
linux-image-6.8.0-1008-oracle-64k (Ubuntu package)
linux-image-oem-24.04 (Ubuntu package)
linux-image-6.8.0-1008-oracle (Ubuntu package)
linux-image-oem-24.04a (Ubuntu package)
linux-image-ibm-classic (Ubuntu package)
linux-image-ibm-lts-24.04 (Ubuntu package)
linux-image-nvidia-64k (Ubuntu package)
linux-image-6.8.0-1009-nvidia-64k (Ubuntu package)
linux-image-6.8.0-1009-nvidia (Ubuntu package)
linux-image-6.8.0-1010-azure (Ubuntu package)
linux-image-6.8.0-1010-azure-fde (Ubuntu package)
linux-image-6.8.0-1010-gcp (Ubuntu package)
linux-image-6.8.0-1011-aws (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

How to mitigate CVE-2024-26811

Install updates from vendor's website.

kernel-debuginfo - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
kernel - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
kernel-tools-debuginfo - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
kernel-debugsource - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
perf-debuginfo - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
kernel-tools - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
kernel-devel - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
bpftool - update to 5.10.0-60.138.0.165
kernel-source - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
kernel-headers - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
perf - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
bpftool-debuginfo - update to 5.10.0-60.138.0.165
python3-perf-debuginfo - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
python3-perf - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
kernel-tools-devel - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.75.0.155, 5.10.0-153.54.0.132, 5.10.0-199.0.0.112
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.116.106, 6.8.0-38.38.1
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.116.106, 6.8.0-38.38.1
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.116.116, 6.8.0-38.38
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.116.116, 6.8.0-38.38
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.116.116, 6.8.0-38.38
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.116.116, 6.8.0-38.38
linux-image-5.15.0-116-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-116.126, 5.15.0-116.126~20.04.1
linux-image-5.15.0-116-lowlatency (Ubuntu package) - addressed in versions 5.15.0-116.126, 5.15.0-116.126~20.04.1
linux-image-5.15.0-116-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-116.126, 5.15.0-116.126~20.04.1
linux-image-5.15.0-116-generic-64k (Ubuntu package) - addressed in versions 5.15.0-116.126, 5.15.0-116.126~20.04.1
linux-image-5.15.0-116-generic (Ubuntu package) - addressed in versions 5.15.0-116.126, 5.15.0-116.126~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.116.126~20.04.1
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.15.0.1035.39
linux-image-5.15.0-1035-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1035.39
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1048.47, 5.15.0.1048.55~20.04.1
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1048.47
linux-image-5.15.0-1048-gkeop (Ubuntu package) - addressed in versions 5.15.0-1048.55, 5.15.0-1048.55~20.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1058.54, 5.15.0.1058.61~20.04.1, 6.8.0-1008.8
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1058.56
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1058.56, 6.8.0-1007.7
linux-image-5.15.0-1058-ibm (Ubuntu package) - addressed in versions 5.15.0-1058.61, 5.15.0-1058.61~20.04.1
linux-image-5.15.0-1058-raspi (Ubuntu package) - update to 5.15.0-1058.61
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1060.60
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1060.60, 5.15.0.1060.66~20.04.1
linux-image-nvidia (Ubuntu package) - addressed in versions 5.15.0.1060.60, 6.8.0-1009.9
linux-image-5.15.0-1060-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1060.61
linux-image-5.15.0-1060-nvidia (Ubuntu package) - update to 5.15.0-1060.61
linux-image-5.15.0-1060-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1060.66, 5.15.0-1060.66~20.04.1
linux-image-intel (Ubuntu package) - addressed in versions 5.15.0.1060.66~20.04.1, 6.8.0-1007.14
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1062.58, 6.8.0-38.38
linux-image-gke (Ubuntu package) - addressed in versions 5.15.0.1062.61, 6.8.0-1006.9
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1062.61
linux-image-5.15.0-1062-kvm (Ubuntu package) - update to 5.15.0-1062.67
linux-image-5.15.0-1062-gke (Ubuntu package) - update to 5.15.0-1062.68
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1063.59
linux-image-5.15.0-1063-oracle (Ubuntu package) - addressed in versions 5.15.0-1063.69, 5.15.0-1063.69~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1063.69~20.04.1, 6.8.0-1008.8
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1064.60
linux-image-5.15.0-1064-gcp (Ubuntu package) - update to 5.15.0-1064.72
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1065.65
linux-image-5.15.0-1065-aws (Ubuntu package) - addressed in versions 5.15.0-1065.71, 5.15.0-1065.71~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1065.71~20.04.1, 6.8.0-1011.12
linux-image-5.15.0-1065-gcp (Ubuntu package) - update to 5.15.0-1065.73~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1065.73~20.04.1, 6.8.0-1010.11
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1068.66
linux-image-5.15.0-1068-azure (Ubuntu package) - addressed in versions 5.15.0-1068.77, 5.15.0-1068.77~20.04.1
linux-image-5.15.0-1068-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1068.77.1, 5.15.0-1068.77~20.04.1.1
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1068.77~20.04.1, 6.8.0-1010.10
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1068.77~20.04.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1068.77~20.04.1.45, 6.8.0-1010.10
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1068.77.45
linux (Debian package) - update to 6.1.85-1
linux-image-6.8.0-38-generic (Ubuntu package) - update to 6.8.0-38.38
linux-image-6.8.0-38-generic-64k (Ubuntu package) - update to 6.8.0-38.38
linux-image-generic-64k-hwe-24.04 (Ubuntu package) - update to 6.8.0-38.38
linux-image-generic-hwe-24.04 (Ubuntu package) - update to 6.8.0-38.38
linux-image-virtual-hwe-24.04 (Ubuntu package) - update to 6.8.0-38.38
linux-image-6.8.0-38-lowlatency-64k (Ubuntu package) - update to 6.8.0-38.38.1
linux-image-6.8.0-38-lowlatency (Ubuntu package) - update to 6.8.0-38.38.1
linux-image-6.8.0-1006-gke (Ubuntu package) - update to 6.8.0-1006.9
linux-image-6.8.0-1007-raspi (Ubuntu package) - update to 6.8.0-1007.7
linux-image-6.8.0-1007-intel (Ubuntu package) - update to 6.8.0-1007.14
linux-image-oracle-64k (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-oem (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-ibm (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-oracle-64k (Ubuntu package) - update to 6.8.0-1008.8
linux-image-oem-24.04 (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-oracle (Ubuntu package) - update to 6.8.0-1008.8
linux-image-oem-24.04a (Ubuntu package) - update to 6.8.0-1008.8
linux-image-ibm-classic (Ubuntu package) - update to 6.8.0-1008.8
linux-image-ibm-lts-24.04 (Ubuntu package) - update to 6.8.0-1008.8
linux-image-nvidia-64k (Ubuntu package) - update to 6.8.0-1009.9
linux-image-6.8.0-1009-nvidia-64k (Ubuntu package) - update to 6.8.0-1009.9
linux-image-6.8.0-1009-nvidia (Ubuntu package) - update to 6.8.0-1009.9
linux-image-6.8.0-1010-azure (Ubuntu package) - update to 6.8.0-1010.10
linux-image-6.8.0-1010-azure-fde (Ubuntu package) - update to 6.8.0-1010.10
linux-image-6.8.0-1010-gcp (Ubuntu package) - update to 6.8.0-1010.11
linux-image-6.8.0-1011-aws (Ubuntu package) - update to 6.8.0-1011.12
kernel - addressed in versions 6.8.5-100.fc38, 6.8.5-200.fc39, 6.8.5-300.fc40

External References

Related Security Bulletins