VULNERABILITY INTELLIGENCE

CVE-2024-26828

CVSS score9.4 CRITICAL
EPSS probability0.75%
CISA KEVNot currently listed
Published2024-04-17
Last modified2026-10-30
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Weakness classification

  • nvd@nist.gov: CWE-191

Primary references