CVE - CVE-2024-26828

CVE-ID
CVE-2024-26828	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/7190353835b4a219abb70f90b06cdcae97f11512 URL:https://git.kernel.org/stable/c/7190353835b4a219abb70f90b06cdcae97f11512 MISC:https://git.kernel.org/stable/c/cffe487026be13eaf37ea28b783d9638ab147204 URL:https://git.kernel.org/stable/c/cffe487026be13eaf37ea28b783d9638ab147204 MISC:https://git.kernel.org/stable/c/df2af9fdbc4ddde18a3371c4ca1a86596e8be301 URL:https://git.kernel.org/stable/c/df2af9fdbc4ddde18a3371c4ca1a86596e8be301 MISC:https://git.kernel.org/stable/c/f7ff1c89fb6e9610d2b01c1821727729e6609308 URL:https://git.kernel.org/stable/c/f7ff1c89fb6e9610d2b01c1821727729e6609308
Assigning CNA
kernel.org
Date Record Created
20240219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)