← Back to browse · API

CVE-2024-26594

Severity
CRITICAL
CVSS
9.1
EPSS
0.51248
Risk score
54.34
CISA KEV
No
PoC
No
Published
2024-02-23
Modified
2026-08-05
First seen
2026-08-05
Aliases
EUVD-2024-23856, GHSA-PWM2-GM2P-7637
Products
Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <5e6dfec95833edc54c48605a98365a7325e5541e, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <6eb8015492bcc84e40646390e50a862b2c0529c9, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <92e470163d96df8db6c4fa0f484e4a229edb903d, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <dd1de9268745f0eac83a430db7afc32cbd62e84b, Linux:Linux 5.15, Linux:Linux patch: 0, Linux:Linux patch: 5.15.149, Linux:Linux patch: 6.1.75, Linux:Linux patch: 6.6.14, Linux:Linux patch: 6.7.2, Linux:Linux patch: 6.8, linux:linux_kernel
Sources
nvd CVE-2024-26594
euvd EUVD-2024-23856

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.

References