Vulnerability · Published Jan 15, 2024 · Assigned by redhat

CVE-2024-0565Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

Medium 6.8

In plain English

A medium-severity security flaw in kernel from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)2.0%top 19.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	bpftool	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	bpftool	7.3.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-debug	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-debug-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-debug-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-debug-devel-matched	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-debug-modules	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-debug-modules-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-debug-modules-extra	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-devel-matched	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-modules	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-modules-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-64k-modules-extra	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-abi-stablelists	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-abi-stablelists	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-core	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-cross-headers	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-cross-headers	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-debug	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-debug	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-debug-core	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-debug-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-debug-devel	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-debug-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-debug-devel-matched	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-debug-modules	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-debug-modules	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-debug-modules-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-debug-modules-extra	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-debug-modules-extra	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-debug-uki-virt	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-devel	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-devel-matched	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-doc	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-doc	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-headers	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-modules	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-modules	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-modules-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-modules-extra	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-modules-extra	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-debug	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-debug-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-debug-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-debug-modules	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-debug-modules-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-debug-modules-extra	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-modules	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-modules-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-rt-modules-extra	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-tools	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-tools	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-tools-libs	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-tools-libs	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-tools-libs-devel	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-tools-libs-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-uki-virt	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-zfcpdump	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-zfcpdump	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-zfcpdump-core	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-zfcpdump-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-zfcpdump-devel	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-zfcpdump-devel	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-zfcpdump-devel-matched	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-zfcpdump-modules	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-zfcpdump-modules	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	kernel-zfcpdump-modules-core	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	kernel-zfcpdump-modules-extra	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	kernel-zfcpdump-modules-extra	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	libperf	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	perf	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	perf	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:8	python3-perf	4.18.0-513.24.1.el8_9	ALSA-2024:1607
AlmaLinux:9	python3-perf	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	rtla	5.14.0-427.13.1.el9_4	ALSA-2024:2394
AlmaLinux:9	rv	5.14.0-427.13.1.el9_4	ALSA-2024:2394
Debian:12	linux	6.1.69-1	DEBIAN-CVE-2024-0565
Debian:13	linux	6.6.8-1	DEBIAN-CVE-2024-0565
Debian:14	linux	6.6.8-1	DEBIAN-CVE-2024-0565
Rocky Linux:8	kernel	0:4.18.0-513.24.1.el8_9.cloud.0.1	RXSA-2024:1607
Rocky Linux:8	kernel	0:4.18.0-513.24.1.el8_9	RLSA-2024:1607
Rocky Linux:8	kernel-rt	0:4.18.0-513.24.1.rt7.326.el8_9	RLSA-2024:1614
Ubuntu:22.04:LTS	linux	5.15.0-97.107	USN-6653-1
Ubuntu:22.04:LTS	linux	5.15.0-97.107	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-allwinner-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-aws	5.15.0-1055.60	USN-6653-2
Ubuntu:22.04:LTS	linux-aws	5.15.0-1055.60	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-aws-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-aws-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-aws-6.5	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-azure	5.15.0-1057.65	USN-6653-1
Ubuntu:22.04:LTS	linux-azure	5.15.0-1057.65	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-azure-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-azure-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-azure-6.5	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-azure-fde	5.15.0-1057.65.1	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-azure-fde	5.15.0-1057.65.1	USN-6653-1
Ubuntu:22.04:LTS	linux-azure-fde-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-azure-fde-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-gcp	5.15.0-1052.60	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-gcp	5.15.0-1052.60	USN-6653-1
Ubuntu:22.04:LTS	linux-gcp-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-gcp-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-gcp-6.5	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-gke	5.15.0-1051.56	USN-6653-4
Ubuntu:22.04:LTS	linux-gke	5.15.0-1051.56	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-gkeop	5.15.0-1037.43	USN-6653-1
Ubuntu:22.04:LTS	linux-gkeop	5.15.0-1037.43	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-hwe-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-hwe-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-hwe-6.5	6.5.0-21.21~22.04.1	USN-6651-1
Ubuntu:22.04:LTS	linux-hwe-6.5	6.5.0-21.21~22.04.1	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-ibm	5.15.0-1047.50	USN-6653-1
Ubuntu:22.04:LTS	linux-ibm	5.15.0-1047.50	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-intel-iotg	5.15.0-1049.55	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-intel-iotg	5.15.0-1049.55	USN-6653-1
Ubuntu:22.04:LTS	linux-kvm	5.15.0-1051.56	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-kvm	5.15.0-1051.56	USN-6653-1
Ubuntu:22.04:LTS	linux-lowlatency	5.15.0-97.107	USN-6653-3
Ubuntu:22.04:LTS	linux-lowlatency	5.15.0-97.107	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-lowlatency-hwe-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-lowlatency-hwe-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-lowlatency-hwe-6.5	6.5.0-21.21.1~22.04.1	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-lowlatency-hwe-6.5	6.5.0-21.21.1~22.04.1	USN-6651-2
Ubuntu:22.04:LTS	linux-nvidia	5.15.0-1045.45	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-nvidia	5.15.0-1045.45	USN-6653-1
Ubuntu:22.04:LTS	linux-nvidia-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-nvidia-6.5	6.5.0-1014.14	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-nvidia-tegra	5.15.0-1022.22	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-nvidia-tegra-igx	5.15.0-1009.9	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-oem-5.17	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-oem-6.0	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-oem-6.1	6.1.0-1033.33	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-oem-6.1	6.1.0-1033.33	USN-6639-1
Ubuntu:22.04:LTS	linux-oem-6.5	6.5.0-1015.16	USN-6651-2
Ubuntu:22.04:LTS	linux-oem-6.5	6.5.0-1015.16	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-oracle	5.15.0-1052.58	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-oracle	5.15.0-1052.58	USN-6653-1
Ubuntu:22.04:LTS	linux-oracle-6.5	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-raspi	5.15.0-1047.50	USN-6653-1
Ubuntu:22.04:LTS	linux-raspi	5.15.0-1047.50	UBUNTU-CVE-2024-0565
Ubuntu:24.04:LTS	linux-raspi	6.7.0-1001.1	UBUNTU-CVE-2024-0565
Ubuntu:24.04:LTS	linux-raspi-realtime	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-realtime	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-riscv	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-riscv-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-riscv-6.5	6.5.0-21.21.1~22.04.1	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-starfive-5.19	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-starfive-6.2	no fix listed	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-starfive-6.5	6.5.0-1008.9~22.04.1	UBUNTU-CVE-2024-0565
Ubuntu:22.04:LTS	linux-starfive-6.5	6.5.0-1008.9~22.04.1	USN-6651-3
Ubuntu:22.04:LTS	linux-xilinx-zynqmp	5.15.0-1030.34	UBUNTU-CVE-2024-0565

Affected products (as reported)

Vendor	Product	Versions
Linux	kernel	4.19 – before 5.10.2115.11 – before 5.15.1505.16 – before 6.1.696.2 – before 6.6.8
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	RHOL-5.7-RHEL-8	see references
Red Hat	Red Hat Enterprise Linux 6	see references
Red Hat	Red Hat Enterprise Linux 7	see references

Weakness: CWE-191 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

References

RHSA-2024:1188 vendor-advisory, x_refsource_REDHAT
RHSA-2024:1404 vendor-advisory, x_refsource_REDHAT
RHSA-2024:1532 vendor-advisory, x_refsource_REDHAT
RHSA-2024:1533 vendor-advisory, x_refsource_REDHAT
RHSA-2024:1607 vendor-advisory, x_refsource_REDHAT
RHSA-2024:1614 vendor-advisory, x_refsource_REDHAT
RHSA-2024:2093 vendor-advisory, x_refsource_REDHAT
RHSA-2024:2394 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-0565 vdb-entry, x_refsource_REDHAT
RHBZ#2258518 issue-tracking, x_refsource_REDHAT
https://www.spinics.net/lists/stable-commits/msg328851.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html x_transferred
https://security.netapp.com/advisory/ntap-20240223-0002/ x_transferred