An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.1 · linux, redhatNVD modified 2026-10-14 23:17
Affected (CPE criteria) 20
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*
References 26
- https://access.redhat.com/errata/RHSA-2024:0723 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0725 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0881 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0897 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1188 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1248 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1404 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:2094 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-6606 Third Party Advisory
- https://bugzilla.kernel.org/show_bug.cgi?id=218218 Exploit, Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=2253611 Exploit, Issue Tracking
- https://access.redhat.com/errata/RHSA-2024:0723 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0725 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0881 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0897 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1188 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1248 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1404 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:2094 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-6606 Third Party Advisory
- https://bugzilla.kernel.org/show_bug.cgi?id=218218 Exploit, Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=2253611 Exploit, Issue Tracking
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html