Intrusion PreventionLinux.Kernel.ksmbd.Mech.Token.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in Linux Kernel Project Linux Kernel.
The vulnerability is due to memory access error when handling incoming SMB request. A remote, unauthenticated attacker could exploit the vulnerability by sending a crafted request to the target server. Successfully exploiting the vulnerability could result in information disclosure or denial of service in the context of the kernel.
Affected Products
Linux Kernel Project Linux Kernel prior to 6.8-rc5
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://github.com/torvalds/linux/commit/92e470163d96df8db6c4fa0f484e4a229edb903d
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 54940 |
| Created | Mar 12, 2024 |
| Updated | Mar 20, 2024 |
| Risk |
|
| CVE ID | CVE-2024-26594 |
| Exploit Prediction Score | 0.04% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |