Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26594
HistoryJun 14, 2024 - 1:43 p.m.

CVE-2024-26594

2024-06-1413:43:33
redhat.com
access.redhat.com
7
cve-2024-26594
ksmbd
mech token
session setup
error validation
linux kernel

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.9%

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.9%