CVE-2024-26828
Assigner: Linux
Published: 2024-04-17T09:43:52.995Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check
if the size_left is greater than the minimum size we need.  However,
the problem is that "bytes_left" is type ssize_t while sizeof() is type
size_t.  That means that because of type promotion, the comparison is
done as an unsigned and if we have negative bytes left the loop
continues instead of ending.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: fe856be475f7
lessThan: 7190353835b4
status: affected
versionType: git
version: fe856be475f7
lessThan: f7ff1c89fb6e
status: affected
versionType: git
version: fe856be475f7
lessThan: df2af9fdbc4d
status: affected
versionType: git
version: fe856be475f7
lessThan: cffe487026be
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 4.18
status: affected
version: 0
lessThan: 4.18
status: unaffected
versionType: custom
version: 6.1.79
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.6.18
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.7.6
lessThanOrEqual: 6.7.*
status: unaffected
versionType: custom
version: 6.8
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: cifs: fix underflow in parse_server_interfaces()
x_generator: engine: bippy-d175d3acf727