Threats tagged 'ghsa-7qch-65fq-c3xh'

CVE-2024-26952 is a high-severity vulnerability in the Linux kernel's ksmbd component involving a potential out-of-bounds access due to invalid buffer offset fields in certain requests. The issue arises when the buffer offset is not properly validated, which could lead to memory corruption. A patch has been applied to enforce a minimum value for the buffer offset, thereby validating the buffer length and preventing out-of-bounds access.