CVE-2024-46795

5.5 · MEDIUM

Published Sep 18, 2024 linux CWE-476 EPSS 0.28% (20th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-46795 is a medium-severity vulnerability affecting linux linux_kernel. It was published on September 18, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: unset the binding mark of a reused connection

Steve French reported null pointer dereference error from sha256 lib.

cifs.ko can send session setup requests on reused connection.

If reused connection is used for binding session, conn->binding can

still remain true and generate_preauth_hash() will not set

sess->Preauth_HashValue and it will be NULL.

It is used as a material to create an encryption key in

ksmbd_gen_smb311_encryptionkey. ->Preauth_HashValue cause null pointer

dereference error from crypto_shash_update().

BUG: kernel NULL pointer dereference, address: 0000000000000000

#PF: supervisor read access in kernel mode

#PF: error_code(0x0000) - not-present page

PGD 0 P4D 0

Oops: 0000 [#1] PREEMPT SMP PTI

CPU: 8 PID: 429254 Comm: kworker/8:39

Hardware name: LENOVO 20MAS08500/20MAS08500, BIOS N2CET69W (1.52 )

Workqueue: ksmbd-io handle_ksmbd_work [ksmbd]

RIP: 0010:lib_sha256_base_do_update.isra.0+0x11e/0x1d0

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 5.15, < 5.15.167	Affected

References

Ref git.kernel.org/stable/c/41bc256da7e47b679df87c7fc7a5b393052b9cce Ref git.kernel.org/stable/c/4c8496f44f5bb5c06cdef5eb130ab259643392a1 Ref git.kernel.org/stable/c/78c5a6f1f630172b19af4912e755e1da93ef0ab5 Ref git.kernel.org/stable/c/93d54a4b59c4b3d803d20aa645ab5ca71f3b3b02 Ref git.kernel.org/stable/c/9914f1bd61d5e838bb1ab15a71076d37a6db65d1 Ref lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Frequently Asked Questions

What is CVE-2024-46795?

CVE-2024-46795 is a medium-severity vulnerability affecting linux linux_kernel. It was published on September 18, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-46795?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-46795?

How can CyberStrike help with CVE-2024-46795?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-46795 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719