CVE-2024-26828 cifs: fix underflow in parse_server_interfaces()

What is CVE-2024-26828?

CVE-2024-26828 is a critical vulnerability in Linux kernel, published on 17 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Weakness: CWE-191

Which versions are affected by CVE-2024-26828?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2024-26828?

Apply the vendor's patch.

Is CVE-2024-26828 being exploited?

There is no known exploitation of CVE-2024-26828 in the wild and no public exploit code.

Other vulnerabilities in Linux kernel

• CVE-2026-53266 Linux Kernel Out-of-Bounds Write Exploited High 8.8
• CVE-2013-6282 Linux Kernel Improper Input Validation Exploited High 8.8
• CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Exploited High 8.4
• CVE-2013-2094 Linux Kernel Privilege Escalation Exploited High 8.4
• CVE-2026-53362 Linux Kernel Unspecified Exploited High 7.8

All Linux kernel vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as BELL-CVE-2024-26828, DEBIAN-CVE-2024-26828, GHSA-q43w-g673-m6f4, ROOT-OS-DEBIAN-11-CVE-2024-26828, UBUNTU-CVE-2024-26828.