Out-of-bounds read in Linux kernel - CVE-2024-26952

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU90317

Out-of-bounds read in Linux kernel - CVE-2024-26952

Published: May 31, 2024 / Updated: May 14, 2025


Vulnerability identifier: #VU90317
CSH Severity: Low
CVSS v4 BT: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-26952
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to an out-of-bounds read error within the smb2_tree_connect(), smb2_open(), smb2_query_dir(), smb2_get_ea(), smb2_set_info_file(), smb2_set_info(), fsctl_pipe_transceive() and smb2_ioctl() functions in fs/smb/server/smb2pdu.c, within the smb2_get_data_area_len() function in fs/smb/server/smb2misc.c. A local user can execute arbitrary code.


Affected software

Linux kernel
Debian Linux
Ubuntu
openEuler
kernel-source
python3-perf
python3-perf-debuginfo
perf-debuginfo
perf
kernel-tools-devel
kernel-tools-debuginfo
kernel-tools
bpftool
bpftool-debuginfo
kernel-headers
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-5.15.0-117-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-117-lowlatency (Ubuntu package)
linux-image-5.15.0-117-generic-lpae (Ubuntu package)
linux-image-5.15.0-117-generic-64k (Ubuntu package)
linux-image-5.15.0-117-generic (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.15.0-1035-xilinx-zynqmp (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1049-gkeop (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1059-ibm (Ubuntu package)
linux-image-5.15.0-1059-raspi (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1061-nvidia (Ubuntu package)
linux-image-5.15.0-1061-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1061-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1063-kvm (Ubuntu package)
linux-image-5.15.0-1063-gke (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1064-oracle (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1065-oracle (Ubuntu package)
linux-image-5.15.0-1065-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1066-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1070-azure (Ubuntu package)
linux-image-5.15.0-1070-azure-fde (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux (Debian package)
linux-image-virtual-hwe-24.04 (Ubuntu package)
linux-image-generic-hwe-24.04 (Ubuntu package)
linux-image-generic-64k-hwe-24.04 (Ubuntu package)
linux-image-6.8.0-35-lowlatency-64k (Ubuntu package)
linux-image-6.8.0-35-lowlatency (Ubuntu package)
linux-image-6.8.0-35-generic-64k (Ubuntu package)
linux-image-6.8.0-35-generic (Ubuntu package)
linux-image-6.8.0-1004-gke (Ubuntu package)
linux-image-6.8.0-1005-raspi (Ubuntu package)
linux-image-6.8.0-1006-oem (Ubuntu package)
linux-image-ibm-lts-24.04 (Ubuntu package)
linux-image-ibm-classic (Ubuntu package)
linux-image-6.8.0-1006-ibm (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-6.8.0-1006-oracle-64k (Ubuntu package)
linux-image-6.8.0-1006-oracle (Ubuntu package)
linux-image-oem-24.04 (Ubuntu package)
linux-image-oem-24.04a (Ubuntu package)
linux-image-6.8.0-1008-azure-fde (Ubuntu package)
linux-image-6.8.0-1008-azure (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)
IBM Security Guardium

How to mitigate CVE-2024-26952

Install update from vendor's website.

Linux kernel - update to 6.6.32
kernel-source - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
python3-perf - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
python3-perf-debuginfo - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
perf-debuginfo - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
perf - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel-tools-devel - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel-tools-debuginfo - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel-tools - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
bpftool - addressed in versions 5.10.0-248.0.0.147, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
bpftool-debuginfo - addressed in versions 5.10.0-248.0.0.147, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel-headers - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel-debuginfo - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel-debugsource - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel-devel - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
kernel - addressed in versions 5.10.0-248.0.0.147, 5.10.0-248.0.0.150, 6.6.0-76.0.0.69, 6.6.0-76.0.0.80
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.117.107, 6.8.0-35.35.1
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.117.107, 6.8.0-35.35.1
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.117.117, 6.8.0-35.35
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.117.117, 6.8.0-35.35
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.117.117, 6.8.0-35.35
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.117.117, 6.8.0-35.35
linux-image-5.15.0-117-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-117.127, 5.15.0-117.127~20.04.1
linux-image-5.15.0-117-lowlatency (Ubuntu package) - addressed in versions 5.15.0-117.127, 5.15.0-117.127~20.04.1
linux-image-5.15.0-117-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-117.127, 5.15.0-117.127~20.04.1
linux-image-5.15.0-117-generic-64k (Ubuntu package) - addressed in versions 5.15.0-117.127, 5.15.0-117.127~20.04.1
linux-image-5.15.0-117-generic (Ubuntu package) - addressed in versions 5.15.0-117.127, 5.15.0-117.127~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.117.127~20.04.1
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.15.0.1035.39
linux-image-5.15.0-1035-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1035.39
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1049.48
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1049.48, 5.15.0.1049.56~20.04.1
linux-image-5.15.0-1049-gkeop (Ubuntu package) - addressed in versions 5.15.0-1049.56, 5.15.0-1049.56~20.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1059.55, 5.15.0.1059.62~20.04.1, 6.8.0-1006.6
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1059.57, 6.8.0-1005.5
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1059.57
linux-image-5.15.0-1059-ibm (Ubuntu package) - addressed in versions 5.15.0-1059.62, 5.15.0-1059.62~20.04.1
linux-image-5.15.0-1059-raspi (Ubuntu package) - update to 5.15.0-1059.62
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1061.61
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1061.61
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1061.61, 5.15.0.1061.67~20.04.1
linux-image-5.15.0-1061-nvidia (Ubuntu package) - update to 5.15.0-1061.62
linux-image-5.15.0-1061-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1061.62
linux-image-5.15.0-1061-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1061.67, 5.15.0-1061.67~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1061.67~20.04.1
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1063.59, 6.8.0-35.35
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1063.62
linux-image-gke (Ubuntu package) - addressed in versions 5.15.0.1063.62, 6.8.0-1004.7
linux-image-5.15.0-1063-kvm (Ubuntu package) - update to 5.15.0-1063.68
linux-image-5.15.0-1063-gke (Ubuntu package) - update to 5.15.0-1063.69
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1064.60
linux-image-5.15.0-1064-oracle (Ubuntu package) - update to 5.15.0-1064.70
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1065.61
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1065.71~20.04.1, 6.8.0-1006.6
linux-image-5.15.0-1065-oracle (Ubuntu package) - update to 5.15.0-1065.71~20.04.1
linux-image-5.15.0-1065-gcp (Ubuntu package) - addressed in versions 5.15.0-1065.73, 5.15.0-1065.73~20.04.1
linux-image-gcp (Ubuntu package) - update to 5.15.0.1065.73~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1066.66
linux-image-5.15.0-1066-aws (Ubuntu package) - addressed in versions 5.15.0-1066.72, 5.15.0-1066.72~20.04.1
linux-image-aws (Ubuntu package) - update to 5.15.0.1066.72~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1070.68
linux-image-5.15.0-1070-azure (Ubuntu package) - addressed in versions 5.15.0-1070.79, 5.15.0-1070.79~20.04.1
linux-image-5.15.0-1070-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1070.79.1, 5.15.0-1070.79~20.04.1.1
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1070.79~20.04.1, 6.8.0-1008.8
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1070.79~20.04.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1070.79~20.04.1.47, 6.8.0-1008.8
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1070.79.47
linux (Debian package) - update to 6.1.119-1
linux-image-virtual-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-64k-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-6.8.0-35-lowlatency-64k (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-6.8.0-35-lowlatency (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-6.8.0-35-generic-64k (Ubuntu package) - update to 6.8.0-35.35+1
linux-image-6.8.0-35-generic (Ubuntu package) - update to 6.8.0-35.35+1
linux-image-6.8.0-1004-gke (Ubuntu package) - update to 6.8.0-1004.7
linux-image-6.8.0-1005-raspi (Ubuntu package) - update to 6.8.0-1005.5
linux-image-6.8.0-1006-oem (Ubuntu package) - update to 6.8.0-1006.6
linux-image-ibm-lts-24.04 (Ubuntu package) - update to 6.8.0-1006.6
linux-image-ibm-classic (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-ibm (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oracle-64k (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oracle-64k (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oracle (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oem-24.04 (Ubuntu package) - update to 6.8.0-1006.6+1
linux-image-oem-24.04a (Ubuntu package) - update to 6.8.0-1006.6+1
linux-image-6.8.0-1008-azure-fde (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-azure (Ubuntu package) - update to 6.8.0-1008.8
IBM Security Guardium - addressed in versions 12.0p31, 12.0p106

External References

Related Security Bulletins