« List of all CVEs

CVE-2024-0565

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

Published: 1/15/2024 Last updated: 11/6/2025 Reserved: 1/15/2024

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 6.8 Medium CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Opam packages affected (29)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes ortools_solvers orun rawlink rawlink-eio rawlink-lwt restricted shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (41)

Product Vendor Version
Red Hat Enterprise Linux 9 Red Hat <= 1.0.11
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 Red Hat <= <= 2.3.9
Red Hat Enterprise Linux 9 Red Hat <= 1.0.24
Red Hat Enterprise Linux 9 Red Hat <= 5.19.*
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat <= 6.4.*
<= 1.0
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 Red Hat <= 6.0.*
Red Hat Enterprise Linux 7 Red Hat <= *
Red Hat Enterprise Linux 8 Red Hat <= <= 1.25
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat <= <= 1.2.2
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat <= 5.15.*
<= 6.2.*
Red Hat Enterprise Linux 9 Red Hat < 6.2
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat <= *
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat <= <= 1.4.10
Red Hat Enterprise Linux 8 Red Hat < 5.15
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat 4.6
Red Hat Enterprise Linux 7 Red Hat 5.17
Red Hat Enterprise Linux 8 Red Hat n/a
RHOL-5.7-RHEL-8 Red Hat < 4.6
RHOL-5.7-RHEL-8 Red Hat <= <= 2.0.9
RHOL-5.7-RHEL-8 Red Hat <= *
RHOL-5.7-RHEL-8 Red Hat < 2.55.0
RHOL-5.7-RHEL-8 Red Hat <= *
RHOL-5.7-RHEL-8 Red Hat <= <= 2.0.1
RHOL-5.7-RHEL-8 Red Hat < 49fca83f6f3f0cafe5bf5b43e8ee81cf73c2d5e0
RHOL-5.7-RHEL-8 Red Hat <= < 3.0.8
RHOL-5.7-RHEL-8 Red Hat <= 4.14.*
RHOL-5.7-RHEL-8 Red Hat <= 4.19.*
RHOL-5.7-RHEL-8 Red Hat <= <= 1.0.2
RHOL-5.7-RHEL-8 Red Hat <= <= 2.1.11
RHOL-5.7-RHEL-8 Red Hat < f16599e638073ef0b2828bb64f5e99138e9381b5
RHOL-5.7-RHEL-8 Red Hat <= <= 1.5.4
RHOL-5.7-RHEL-8 Red Hat <= 5.4.*
RHOL-5.7-RHEL-8 Red Hat V2.002 and below
RHOL-5.7-RHEL-8 Red Hat < 256aace3a5d8c987183ba4832dffb36f48ea7d3b
RHOL-5.7-RHEL-8 Red Hat <= 5.10.*
RHOL-5.7-RHEL-8 Red Hat < c58da0ba3e5c86e51e2c1557afaf6f71e00c4533
RHOL-5.7-RHEL-8 Red Hat <= 5.15.*
RHOL-5.7-RHEL-8 Red Hat <= 6.1.*
RHOL-5.7-RHEL-8 Red Hat <= 6.5.*

References (48)