CVE-2024-0565

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 6.8EPSS 2%

Published 2024-01-15Updated 2025-04-27

Vulnerability details

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CNAredhat

EPSS score history

Sources

1 links

PoC links are not available for guest users. Login to view them.

CVE Organization

Profile

CVSS

6.8

EPSS

Published

2024-01-15

Updated

2025-04-27

CNA

redhat

Vendors

Red Hat

9 products

CPEs

cpe:/a:redhat:enterprise_linux:8::nfv

cpe:/a:redhat:enterprise_linux:8::realtime

cpe:/a:redhat:enterprise_linux:8::crb

cpe:/o:redhat:enterprise_linux:8::baseos

cpe:/a:redhat:rhel_eus:8.6::crb

cpe:/o:redhat:rhel_eus:8.6::baseos

cpe:/o:redhat:rhev_hypervisor:4.4::el8

cpe:/a:redhat:rhel_eus:8.8::crb

cpe:/o:redhat:rhel_eus:8.8::baseos

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:enterprise_linux:9::crb

cpe:/a:redhat:enterprise_linux:9::nfv

cpe:/a:redhat:enterprise_linux:9::realtime

cpe:/o:redhat:enterprise_linux:9::baseos

cpe:/a:redhat:rhel_eus:9.2::appstream

cpe:/a:redhat:rhel_eus:9.2::crb

cpe:/o:redhat:rhel_eus:9.2::baseos

cpe:/a:redhat:rhel_eus:9.2::nfv

cpe:/a:redhat:rhel_eus:9.2::realtime

cpe:/a:redhat:logging:5.7::el8

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:9

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated