Beveiligingsadvies

CVE-2024-22705

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-23 00:00:00
Laatst bijgewerkt 2025-06-05 19:45:17
Toegewezen door mitre
CVSS-score 7.8
Status PUBLISHED

Beschrijving

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.