CVE-2024-26594critical

CVE-2024-26594: critical vulnerability in Linux

ksmbd: validate mech token in session setup

Published · Updated

40Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 51%
exploitation probability
51%top 1% of all CVEs
observed exploitation
nono source reports it
In short

The ksmbd SMB server in Linux was not properly validating authentication tokens sent by clients during session setup, allowing invalid tokens to bypass validation. This could allow attackers to establish unauthorized connections.

Technical detail

ksmbd failed to validate the mechanism token (mech token) in the SMB session setup request, allowing clients to send malformed or invalid authentication tokens without proper rejection. An unauthenticated attacker can trigger this by sending a crafted session setup request with an invalid mech token, potentially bypassing authentication controls.

Summary generated and translated by AI from the official description.
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/5e6dfec95833edc54c48605a98365a7325e5541ehttps://git.kernel.org/stable/c/6eb8015492bcc84e40646390e50a862b2c0529c9https://git.kernel.org/stable/c/92e470163d96df8db6c4fa0f484e4a229edb903dhttps://git.kernel.org/stable/c/a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202ahttps://git.kernel.org/stable/c/dd1de9268745f0eac83a430db7afc32cbd62e84b