CVE-2024-26594 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Linux	Linux Kernel

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

No data.

References

Link	Providers
https://git.kernel.org/stable/c/5e6dfec95833edc54c48605a98365a7325e5541e
https://git.kernel.org/stable/c/6eb8015492bcc84e40646390e50a862b2c0529c9
https://git.kernel.org/stable/c/92e470163d96df8db6c4fa0f484e4a229edb903d
https://git.kernel.org/stable/c/a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a
https://git.kernel.org/stable/c/dd1de9268745f0eac83a430db7afc32cbd62e84b
https://lore.kernel.org/linux-cve-announce/2024022325-CVE-2024-26594-1cbc@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26594
https://www.cve.org/CVERecord?id=CVE-2024-26594

History

Tue, 05 Nov 2024 10:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-02-23T13:26:46.577Z

Updated: 2024-11-05T09:12:11.034Z

Reserved: 2024-02-19T14:20:24.127Z

Link: CVE-2024-26594

Vulnrichment

Updated: 2024-08-02T00:07:19.636Z

NVD

Status : Modified

Published: 2024-02-23T14:15:45.150

Modified: 2024-05-29T06:16:36.423

Link: CVE-2024-26594

Redhat

Severity : Moderate

Publid Date: 2024-02-23T00:00:00Z

Links: CVE-2024-26594 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26594", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.127Z", "datePublished": "2024-02-23T13:26:46.577Z", "dateUpdated": "2024-11-05T09:12:11.034Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:12:11.034Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate mech token in session setup\n\nIf client send invalid mech token in session setup request, ksmbd\nvalidate and make the error if it is invalid."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/server/asn1.c", "fs/smb/server/connection.h", "fs/smb/server/smb2pdu.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "dd1de9268745", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "6eb8015492bc", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "a2b21ef1ea4c", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "5e6dfec95833", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "92e470163d96", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/server/asn1.c", "fs/smb/server/connection.h", "fs/smb/server/smb2pdu.c"], "versions": [{"version": "5.15.149", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.75", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.14", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.2", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/dd1de9268745f0eac83a430db7afc32cbd62e84b"}, {"url": "https://git.kernel.org/stable/c/6eb8015492bcc84e40646390e50a862b2c0529c9"}, {"url": "https://git.kernel.org/stable/c/a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a"}, {"url": "https://git.kernel.org/stable/c/5e6dfec95833edc54c48605a98365a7325e5541e"}, {"url": "https://git.kernel.org/stable/c/92e470163d96df8db6c4fa0f484e4a229edb903d"}], "title": "ksmbd: validate mech token in session setup", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26594", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-23T22:33:33.242942Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T17:21:02.695Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:07:19.636Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/dd1de9268745f0eac83a430db7afc32cbd62e84b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6eb8015492bcc84e40646390e50a862b2c0529c9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5e6dfec95833edc54c48605a98365a7325e5541e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/92e470163d96df8db6c4fa0f484e4a229edb903d", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/dd1de9268745f0eac83a430db7afc32cbd62e84b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6eb8015492bcc84e40646390e50a862b2c0529c9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5e6dfec95833edc54c48605a98365a7325e5541e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/92e470163d96df8db6c4fa0f484e4a229edb903d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:07:19.636Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26594", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-23T22:33:33.242942Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T15:20:37.667Z"}}], "cna": {"title": "ksmbd: validate mech token in session setup", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "dd1de9268745", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "6eb8015492bc", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "a2b21ef1ea4c", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "5e6dfec95833", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "92e470163d96", "versionType": "git"}], "programFiles": ["fs/smb/server/asn1.c", "fs/smb/server/connection.h", "fs/smb/server/smb2pdu.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "5.15.149", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.75", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.14", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.2", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/smb/server/asn1.c", "fs/smb/server/connection.h", "fs/smb/server/smb2pdu.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/dd1de9268745f0eac83a430db7afc32cbd62e84b"}, {"url": "https://git.kernel.org/stable/c/6eb8015492bcc84e40646390e50a862b2c0529c9"}, {"url": "https://git.kernel.org/stable/c/a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a"}, {"url": "https://git.kernel.org/stable/c/5e6dfec95833edc54c48605a98365a7325e5541e"}, {"url": "https://git.kernel.org/stable/c/92e470163d96df8db6c4fa0f484e4a229edb903d"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate mech token in session setup\n\nIf client send invalid mech token in session setup request, ksmbd\nvalidate and make the error if it is invalid."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:12:11.034Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26594", "state": "PUBLISHED", "dateUpdated": "2024-11-05T09:12:11.034Z", "dateReserved": "2024-02-19T14:20:24.127Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-23T13:26:46.577Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "78D569F8-1D0B-426D-84B5-EFFE28C63F33", "versionEndExcluding": "5.15.149", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2C4951FA-80C0-4B4C-9836-6E5035DEB0F9", "versionEndExcluding": "6.1.75", "versionStartIncluding": "5.16.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BDBBEB0E-D13A-4567-8984-51C5375350B9", "versionEndExcluding": "6.6.14", "versionStartIncluding": "6.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0EA3778C-730B-464C-8023-18CA6AC0B807", "versionEndExcluding": "6.7.2", "versionStartIncluding": "6.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate mech token in session setup\n\nIf client send invalid mech token in session setup request, ksmbd\nvalidate and make the error if it is invalid."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ksmbd: validar el token mec\u00e1nico en la configuraci\u00f3n de la sesi\u00f3n Si el cliente env\u00eda un token mec\u00e1nico no v\u00e1lido en la solicitud de configuraci\u00f3n de la sesi\u00f3n, ksmbd valida y genera el error si no es v\u00e1lido."}], "id": "CVE-2024-26594", "lastModified": "2024-05-29T06:16:36.423", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-02-23T14:15:45.150", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5e6dfec95833edc54c48605a98365a7325e5541e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6eb8015492bcc84e40646390e50a862b2c0529c9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/92e470163d96df8db6c4fa0f484e4a229edb903d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/dd1de9268745f0eac83a430db7afc32cbd62e84b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}