Read the docs
TI-2024-00523 Aliases CVE-2024-0565GHSA-4jrv-6m77-vrhq

Integer underflow in Linux kernel

Priority LOW 38CWE-191Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 20 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-191 and the CVSS impact.

Summary

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01999 80th percentileScored 2026-11-07
Fix Partial kernel (Linux): 5.10.211, 5.15.150, 6.1.69 +1Red Hat: 8 advisoriesRed Hat: 20 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Linuxkernel4.19 to before 5.10.211; 5.11 to before 5.15.150; 5.16 to before 6.1.69; 6.2 to before 6.6.85.10.211, 5.15.150, 6.1.69, 6.6.8Patch availableCNA
Red HatRed Hat Enterprise Linux 8—4.18.0-513.24.1.rt7.326.el8_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—4.18.0-513.24.1.el8_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—4.18.0-372.95.1.el8_6Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—4.18.0-477.51.1.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9—5.14.0-427.13.1.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9—5.14.0-427.13.1.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—5.14.0-284.59.1.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—5.14.0-284.59.1.rt14.344.el9_2Patch availableCNA
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 8—4.18.0-372.95.1.el8_6Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-16Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-7Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v6.8.1-408Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-19Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v1.0.0-480Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-9Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.4.0-248Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v1.14.6-215Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v6.8.1-431Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v1.1.0-228Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.8.1-471Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v2.9.6-15Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-3Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-27Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-12Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.1.0-527Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.1.0-225Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.28.1-57Patch availableCNA
Red HatRed Hat Enterprise Linux 6——Not affectedCNA
Red HatRed Hat Enterprise Linux 7——Not affectedCNA
Red HatRed Hat Enterprise Linux 7——Not affectedCNA
Red HatRed Hat Enterprise Linux 9——No fix listedCNA
  • kernel VendorLinux Affected 4.19 to before 5.10.211; 5.11 to before 5.15.150; 5.16 to before 6.1.69; 6.2 to before 6.6.8 Fixed in 5.10.211, 5.15.150, 6.1.69, 6.6.8 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.18.0-513.24.1.rt7.326.el8_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.18.0-513.24.1.el8_9 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 4.18.0-372.95.1.el8_6 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 4.18.0-477.51.1.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 5.14.0-427.13.1.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 5.14.0-427.13.1.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-284.59.1.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-284.59.1.rt14.344.el9_2 Patch available CNA
  • Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.18.0-372.95.1.el8_6 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-16 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-7 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v6.8.1-408 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-19 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v1.0.0-480 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-9 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.4.0-248 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v1.14.6-215 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v6.8.1-431 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v1.1.0-228 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.8.1-471 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v2.9.6-15 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-3 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-27 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-12 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.1.0-527 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.1.0-225 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.28.1-57 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*6.1.36 to before 6.7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*6.7 rc1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*6.7 rc2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*6.7 rc3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*6.7 rc4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*6.7 rc5VulnerableLinux
cpe:2.3:a:netapp:ontap_tools:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 6.1.36 to before 6.7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:* Versions 6.7 rc1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:* Versions 6.7 rc2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:* Versions 6.7 rc3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:* Versions 6.7 rc4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:* Versions 6.7 rc5 Vulnerable ·Linux
  • cpe:2.3:a:netapp:ontap_tools:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

  • Fix · CNA kernel (Linux) Fixed in 5.10.211, 5.15.150, 6.1.69, 6.6.8

Red Hat 8 advisories

  • RHSA-2024:2093 Released 2024-05-01 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.7.13
    • RHOL 5.7 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:2394 Released 2024-04-30 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-427.13.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.13.1.el9_4, kernel-64k-devel-5.14.0-427.13.1.el9_4 +11
    • Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.3.0-427.13.1.el9_4, kernel-5.14.0-427.13.1.el9_4, kernel-64k-5.14.0-427.13.1.el9_4 +29
    • Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-427.13.1.el9_4, libperf-5.14.0-427.13.1.el9_4
    • Red Hat Enterprise Linux NFV (v. 9) kernel-rt-5.14.0-427.13.1.el9_4, kernel-rt-core-5.14.0-427.13.1.el9_4, kernel-rt-debug-5.14.0-427.13.1.el9_4 +11
    • Red Hat Enterprise Linux RT (v. 9) kernel-rt-5.14.0-427.13.1.el9_4, kernel-rt-core-5.14.0-427.13.1.el9_4, kernel-rt-debug-5.14.0-427.13.1.el9_4 +9
  • RHSA-2024:1614 Released 2024-04-02 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-core-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-debug-4.18.0-513.24.1.rt7.326.el8_9 +9
    • Red Hat Enterprise Linux for Real Time (v. 8) kernel-rt-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-core-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-debug-4.18.0-513.24.1.rt7.326.el8_9 +7
Show 5 more Red Hat advisories
  • RHSA-2024:1607 Released 2024-04-02 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-513.24.1.el8_9
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-513.24.1.el8_9, kernel-4.18.0-513.24.1.el8_9, kernel-abi-stablelists-4.18.0-513.24.1.el8_9 +19
  • RHSA-2024:1532 Released 2024-03-27 · Red Hat rating Moderate
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.59.1.el9_2
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.59.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.59.1.el9_2, kernel-64k-devel-5.14.0-284.59.1.el9_2 +9
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.59.1.el9_2, kernel-5.14.0-284.59.1.el9_2, kernel-64k-5.14.0-284.59.1.el9_2 +29
  • RHSA-2024:1533 Released 2024-03-27 · Red Hat rating Moderate
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time EUS (v.9.2) kernel-rt-5.14.0-284.59.1.rt14.344.el9_2, kernel-rt-core-5.14.0-284.59.1.rt14.344.el9_2, kernel-rt-debug-5.14.0-284.59.1.rt14.344.el9_2 +9
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) kernel-rt-5.14.0-284.59.1.rt14.344.el9_2, kernel-rt-core-5.14.0-284.59.1.rt14.344.el9_2, kernel-rt-debug-5.14.0-284.59.1.rt14.344.el9_2 +11
  • RHSA-2024:1404 Released 2024-03-19 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.51.1.el8_8
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.51.1.el8_8, kernel-4.18.0-477.51.1.el8_8, kernel-abi-stablelists-4.18.0-477.51.1.el8_8 +19
  • RHSA-2024:1188 Released 2024-03-06 · Red Hat rating Moderate
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.95.1.el8_6
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.95.1.el8_6, kernel-4.18.0-372.95.1.el8_6, kernel-abi-stablelists-4.18.0-372.95.1.el8_6 +19
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.95.1.el8_6, perf-4.18.0-372.95.1.el8_6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 9AffectedNo fix yet
RHOL 5.7 for RHEL 8Fixed RHSA-2024:2093
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2024:1607
Red Hat CodeReady Linux Builder EUS (v.8.6)Fixed RHSA-2024:1188
Red Hat CodeReady Linux Builder EUS (v.8.8)Fixed RHSA-2024:1404
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2024:1532
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:1532
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:1607
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:1188
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:1404
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2024:1532
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux NFV (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux RT (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux Real Time EUS (v.9.2)Fixed RHSA-2024:1533
Red Hat Enterprise Linux Real Time for NFV (v. 8)Fixed RHSA-2024:1614
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)Fixed RHSA-2024:1533
Red Hat Enterprise Linux for Real Time (v. 8)Fixed RHSA-2024:1614
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2024:1188
Not affected: 3 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux AppStream EUS (v.9.2)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-0565
  2. 2026-10-03 Alias added: GHSA-4jrv-6m77-vrhq

References

Patch 2

Advisory 9

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 15278 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences