CVE-2024-26828cifs: fix underflow in parse_server_interfaces()
- 9.4CriticalCVSS base score
- 0.75%Exploitation in 30 daysEPSS · top 44% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.
Timeline
ID reserved
By Linux
- 58 days later
· 58 days later
Published
- 3 years later
· 3 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | Critical9.4 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H |
| CISA-ADPADP (enrichment) | 3.1 | Medium6.7 | CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H |
| NVDNVD · Modified | 3.1 | Critical9.4 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H |
- EPSS (exploitation in 30 days)
- 0.75% · top 44% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.4.
Affected products
- affected fe856be475f7cf5ffcde57341d175ce9fd09434b – < 3babdcb5f1809a9a41e31547a063dedf6bb44cca
- affected fe856be475f7cf5ffcde57341d175ce9fd09434b – < 7190353835b4a219abb70f90b06cdcae97f11512
- affected fe856be475f7cf5ffcde57341d175ce9fd09434b – < f7ff1c89fb6e9610d2b01c1821727729e6609308
- affected fe856be475f7cf5ffcde57341d175ce9fd09434b – < df2af9fdbc4ddde18a3371c4ca1a86596e8be301
- affected fe856be475f7cf5ffcde57341d175ce9fd09434b – < cffe487026be13eaf37ea28b783d9638ab147204
- affected 4.18
- unaffected < 4.18
- unaffected 5.15.224 – ≤ 5.15.*
- unaffected 6.1.79 – ≤ 6.1.*
- unaffected 6.6.18 – ≤ 6.6.*
- unaffected 6.7.6 – ≤ 6.7.*
- unaffected 6.8 – ≤ *
References
References5
- https://git.kernel.org/stable/c/3babdcb5f1809a9a41e31547a063dedf6bb44cca (opens in a new tab)
- https://git.kernel.org/stable/c/7190353835b4a219abb70f90b06cdcae97f11512 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/f7ff1c89fb6e9610d2b01c1821727729e6609308 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/df2af9fdbc4ddde18a3371c4ca1a86596e8be301 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/cffe487026be13eaf37ea28b783d9638ab147204 (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-24090 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-26828)Record last updated .