Description
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-513.18.1.rt7.320.el8_9 to < *unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-513.18.1.el8_9 to < *unaffected
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support
Default version status: affected
0:4.18.0-372.95.1.el8_6 to < *unaffected
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
Default version status: affected
0:4.18.0-477.51.1.el8_8 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:5.14.0-362.24.1.el9_3 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:5.14.0-362.24.1.el9_3 to < *unaffected
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Default version status: affected
0:5.14.0-284.52.1.el9_2 to < *unaffected
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Default version status: affected
0:5.14.0-284.52.1.rt14.337.el9_2 to < *unaffected
Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-372.95.1.el8_6 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-22 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-11 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v6.8.1-407 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-19 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v1.0.0-479 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-7 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v0.4.0-247 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-5 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v1.1.0-227 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.1-470 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v2.9.6-14 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-2 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-24 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v5.8.6-10 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v0.1.0-525 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v0.1.0-224 to < *unaffected
Red Hat RHOL-5.8-RHEL-9
Default version status: affected
v0.28.1-56 to < *unaffected
Red Hat Red Hat Enterprise Linux 6
Default version status: unknown
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
References
- https://access.redhat.com/errata/RHSA-2024:0723 ↗
- https://access.redhat.com/errata/RHSA-2024:0725 ↗
- https://access.redhat.com/errata/RHSA-2024:0881 ↗
- https://access.redhat.com/errata/RHSA-2024:0897 ↗
- https://access.redhat.com/errata/RHSA-2024:1188 ↗
- https://access.redhat.com/errata/RHSA-2024:1248 ↗
- https://access.redhat.com/errata/RHSA-2024:1404 ↗
- https://access.redhat.com/errata/RHSA-2024:2094 ↗
- https://access.redhat.com/security/cve/CVE-2023-6606 ↗
- https://bugzilla.kernel.org/show_bug.cgi?id=218218 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2253611 ↗
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗