发布时间: 2024年5月17日
修改时间: 2024年10月31日
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload.
NVD | openEuler | |
---|---|---|
Confidentiality | None | |
Attack Vector | Local | |
CVSS评分 | 4.0 | |
Attack Complexity | High | |
Privileges Required | High | |
Scope | Unchanged | |
Integrity | None | |
User Interaction | None | |
Availability | None |
公告名 | 概要 | 发布时间 |
---|---|---|
KylinSec-SA-2024-4952 | kernel security update | 2025年2月28日 |
产品 | 包 | 状态 |
---|---|---|
KY3.5.2 | kernel | Fixed |
KY3.5.1 | kernel | Fixed |