CVE-2024-0565: Integer Underflow (Wrap or Wraparound) in Linux kernel
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
AI Analysis
Technical Summary
An integer underflow in the Linux kernel SMB Client's receive_encrypted_standard function causes an out-of-bounds memory read during a memcpy operation. This vulnerability can lead to denial of service by improper input validation in the CIFS filesystem decryption code. The issue affects multiple kernel versions and has been assigned CVE-2024-0565. Red Hat advisories RHSA-2024:1188 and RHSA-2024:1404 provide patches for affected Red Hat Enterprise Linux versions. The vulnerability is rated medium severity with a CVSS score of 6.8.
Potential Impact
Successful exploitation of this vulnerability can cause a denial of service condition in the Linux kernel SMB Client, potentially disrupting system operations. The CVSS vector indicates that the attack requires adjacent network access, high attack complexity, low privileges, and user interaction. Confidentiality, integrity, and availability impacts are all rated high, reflecting the potential severity of the denial of service.
Mitigation Recommendations
Official patches are available from Red Hat as detailed in advisories RHSA-2024:1188 and RHSA-2024:1404. Users should apply these kernel updates promptly and reboot affected systems to mitigate the vulnerability. No additional mitigation steps are indicated beyond applying the official fixes.
CVE-2024-0565: Integer Underflow (Wrap or Wraparound) in Linux kernel
Description
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
CVSS v3.1
Score 6.8medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An integer underflow in the Linux kernel SMB Client's receive_encrypted_standard function causes an out-of-bounds memory read during a memcpy operation. This vulnerability can lead to denial of service by improper input validation in the CIFS filesystem decryption code. The issue affects multiple kernel versions and has been assigned CVE-2024-0565. Red Hat advisories RHSA-2024:1188 and RHSA-2024:1404 provide patches for affected Red Hat Enterprise Linux versions. The vulnerability is rated medium severity with a CVSS score of 6.8.
Potential Impact
Successful exploitation of this vulnerability can cause a denial of service condition in the Linux kernel SMB Client, potentially disrupting system operations. The CVSS vector indicates that the attack requires adjacent network access, high attack complexity, low privileges, and user interaction. Confidentiality, integrity, and availability impacts are all rated high, reflecting the potential severity of the denial of service.
Mitigation Recommendations
Official patches are available from Red Hat as detailed in advisories RHSA-2024:1188 and RHSA-2024:1404. Users should apply these kernel updates promptly and reboot affected systems to mitigate the vulnerability. No additional mitigation steps are indicated beyond applying the official fixes.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- redhat
- Date Reserved
- 2024-01-15T19:19:12.076Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2024:1188","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:1404","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:1532","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:1533","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:1607","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:1614","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:2093","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:2394","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2024-0565","vendor":"Red Hat"}]
Threat ID: 683f034b182aa0cae27e6717
Added to database: 06/03/2025, 14:14:35 UTC
Last enriched: 08/11/2026, 13:51:20 UTC
Last updated: 09/10/2026, 19:36:47 UTC
Views: 138
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.