In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.
{ "vanir_signatures": [ { "id": "CVE-2024-26594-012badfb", "signature_type": "Function", "digest": { "function_hash": "85668852327606214411798202829886009265", "length": 5173.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_sess_setup" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-038a99a4", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "285264208687278024901637539006189605044", "207560040213947380635425744798639138996", "305107058874706933895498668935492880342", "335837611950382568727926128165713522239" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "target": { "file": "fs/smb/server/connection.h" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-0bf71d97", "signature_type": "Function", "digest": { "function_hash": "59105666598587309568938687501043313112", "length": 2755.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92e470163d96df8db6c4fa0f484e4a229edb903d", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "ntlm_authenticate" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-18694823", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "179581286184044102726780366217309315113", "143767885951431437711713951699032310762", "100824104865920471404982477336359565477", "240292084032908946564483902042099963062", "57037373127744311676002620922702891978", "102591679510375589993403089052498776314", "226290367302525170155811860398919631569", "228889114383831637098614755800778608783", "221751455147899572471973339060696383652", "188932336293924472856553504756249171544", "204889774536067331753772101133289230799", "49644327582516830443749732819771666905", "55432063812886508874862323464678585033", "12951196098054199693269195011887848503", "85191560012864444925403838780973885737", "66424255858502825296268129030118389823", "206358797291539810422357043259370505019", "282945632098979069634632218244528178527" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eb8015492bcc84e40646390e50a862b2c0529c9", "target": { "file": "fs/smb/server/smb2pdu.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-2254addd", "signature_type": "Function", "digest": { "function_hash": "69151007133396902266806027548824642592", "length": 254.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "target": { "file": "fs/smb/server/asn1.c", "function": "ksmbd_neg_token_alloc" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-23b3369f", "signature_type": "Function", "digest": { "function_hash": "200714146986254303923376799394801488357", "length": 757.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eb8015492bcc84e40646390e50a862b2c0529c9", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "session_user" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-26c20182", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "179581286184044102726780366217309315113", "143767885951431437711713951699032310762", "100824104865920471404982477336359565477", "240292084032908946564483902042099963062", "57037373127744311676002620922702891978", "102591679510375589993403089052498776314", "226290367302525170155811860398919631569", "228889114383831637098614755800778608783", "221751455147899572471973339060696383652", "188932336293924472856553504756249171544", "204889774536067331753772101133289230799", "49644327582516830443749732819771666905", "55432063812886508874862323464678585033", "12951196098054199693269195011887848503", "85191560012864444925403838780973885737", "66424255858502825296268129030118389823", "206358797291539810422357043259370505019", "282945632098979069634632218244528178527" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd1de9268745f0eac83a430db7afc32cbd62e84b", "target": { "file": "fs/ksmbd/smb2pdu.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-292b1cac", "signature_type": "Function", "digest": { "function_hash": "59105666598587309568938687501043313112", "length": 2755.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6dfec95833edc54c48605a98365a7325e5541e", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "ntlm_authenticate" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-29e89aa7", "signature_type": "Function", "digest": { "function_hash": "85668852327606214411798202829886009265", "length": 5173.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6dfec95833edc54c48605a98365a7325e5541e", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_sess_setup" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-3912acc2", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "148765154944186602744265894516180501902", "106214534844140801233061388012600068596", "146258116417619815715645179174152612372", "261283539232400392378315230916668007651", "14753691145991153427331571610470429895", "94696208058294605739199913111990437860" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eb8015492bcc84e40646390e50a862b2c0529c9", "target": { "file": "fs/smb/server/asn1.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-430fb19d", "signature_type": "Function", "digest": { "function_hash": "69151007133396902266806027548824642592", "length": 254.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd1de9268745f0eac83a430db7afc32cbd62e84b", "target": { "file": "fs/ksmbd/asn1.c", "function": "ksmbd_neg_token_alloc" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-440a520f", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "285264208687278024901637539006189605044", "207560040213947380635425744798639138996", "305107058874706933895498668935492880342", "335837611950382568727926128165713522239" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92e470163d96df8db6c4fa0f484e4a229edb903d", "target": { "file": "fs/smb/server/connection.h" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-4b8a4754", "signature_type": "Function", "digest": { "function_hash": "200714146986254303923376799394801488357", "length": 757.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd1de9268745f0eac83a430db7afc32cbd62e84b", "target": { "file": "fs/ksmbd/smb2pdu.c", "function": "session_user" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-69a4c047", "signature_type": "Function", "digest": { "function_hash": "59105666598587309568938687501043313112", "length": 2755.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eb8015492bcc84e40646390e50a862b2c0529c9", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "ntlm_authenticate" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-6b7fa575", "signature_type": "Function", "digest": { "function_hash": "200714146986254303923376799394801488357", "length": 757.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92e470163d96df8db6c4fa0f484e4a229edb903d", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "session_user" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-6ed518af", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "285264208687278024901637539006189605044", "207560040213947380635425744798639138996", "305107058874706933895498668935492880342", "335837611950382568727926128165713522239" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6dfec95833edc54c48605a98365a7325e5541e", "target": { "file": "fs/smb/server/connection.h" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-6f028434", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "148765154944186602744265894516180501902", "106214534844140801233061388012600068596", "146258116417619815715645179174152612372", "261283539232400392378315230916668007651", "14753691145991153427331571610470429895", "94696208058294605739199913111990437860" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92e470163d96df8db6c4fa0f484e4a229edb903d", "target": { "file": "fs/smb/server/asn1.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-790304af", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "179581286184044102726780366217309315113", "143767885951431437711713951699032310762", "100824104865920471404982477336359565477", "240292084032908946564483902042099963062", "57037373127744311676002620922702891978", "102591679510375589993403089052498776314", "226290367302525170155811860398919631569", "228889114383831637098614755800778608783", "221751455147899572471973339060696383652", "188932336293924472856553504756249171544", "204889774536067331753772101133289230799", "49644327582516830443749732819771666905", "55432063812886508874862323464678585033", "12951196098054199693269195011887848503", "85191560012864444925403838780973885737", "66424255858502825296268129030118389823", "206358797291539810422357043259370505019", "282945632098979069634632218244528178527" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6dfec95833edc54c48605a98365a7325e5541e", "target": { "file": "fs/smb/server/smb2pdu.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-79ca1e5f", "signature_type": "Function", "digest": { "function_hash": "200714146986254303923376799394801488357", "length": 757.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6dfec95833edc54c48605a98365a7325e5541e", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "session_user" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-81b9483d", "signature_type": "Function", "digest": { "function_hash": "69151007133396902266806027548824642592", "length": 254.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92e470163d96df8db6c4fa0f484e4a229edb903d", "target": { "file": "fs/smb/server/asn1.c", "function": "ksmbd_neg_token_alloc" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-826e6588", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "179581286184044102726780366217309315113", "143767885951431437711713951699032310762", "100824104865920471404982477336359565477", "240292084032908946564483902042099963062", "57037373127744311676002620922702891978", "102591679510375589993403089052498776314", "226290367302525170155811860398919631569", "228889114383831637098614755800778608783", "221751455147899572471973339060696383652", "188932336293924472856553504756249171544", "204889774536067331753772101133289230799", "49644327582516830443749732819771666905", "55432063812886508874862323464678585033", "12951196098054199693269195011887848503", "85191560012864444925403838780973885737", "66424255858502825296268129030118389823", "206358797291539810422357043259370505019", "282945632098979069634632218244528178527" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "target": { "file": "fs/smb/server/smb2pdu.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-8b028b77", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "148765154944186602744265894516180501902", "106214534844140801233061388012600068596", "146258116417619815715645179174152612372", "261283539232400392378315230916668007651", "14753691145991153427331571610470429895", "94696208058294605739199913111990437860" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd1de9268745f0eac83a430db7afc32cbd62e84b", "target": { "file": "fs/ksmbd/asn1.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-8ca0be99", "signature_type": "Function", "digest": { "function_hash": "85668852327606214411798202829886009265", "length": 5173.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92e470163d96df8db6c4fa0f484e4a229edb903d", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_sess_setup" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-8ca2d7bf", "signature_type": "Function", "digest": { "function_hash": "200714146986254303923376799394801488357", "length": 757.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "session_user" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-9cf2a464", "signature_type": "Function", "digest": { "function_hash": "69151007133396902266806027548824642592", "length": 254.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eb8015492bcc84e40646390e50a862b2c0529c9", "target": { "file": "fs/smb/server/asn1.c", "function": "ksmbd_neg_token_alloc" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-9ef2342b", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "148765154944186602744265894516180501902", "106214534844140801233061388012600068596", "146258116417619815715645179174152612372", "261283539232400392378315230916668007651", "14753691145991153427331571610470429895", "94696208058294605739199913111990437860" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6dfec95833edc54c48605a98365a7325e5541e", "target": { "file": "fs/smb/server/asn1.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-a5b545bd", "signature_type": "Function", "digest": { "function_hash": "69151007133396902266806027548824642592", "length": 254.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6dfec95833edc54c48605a98365a7325e5541e", "target": { "file": "fs/smb/server/asn1.c", "function": "ksmbd_neg_token_alloc" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-afd9b941", "signature_type": "Function", "digest": { "function_hash": "85668852327606214411798202829886009265", "length": 5173.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd1de9268745f0eac83a430db7afc32cbd62e84b", "target": { "file": "fs/ksmbd/smb2pdu.c", "function": "smb2_sess_setup" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-c5503317", "signature_type": "Function", "digest": { "function_hash": "85668852327606214411798202829886009265", "length": 5173.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eb8015492bcc84e40646390e50a862b2c0529c9", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_sess_setup" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-d564ff16", "signature_type": "Function", "digest": { "function_hash": "59105666598587309568938687501043313112", "length": 2755.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "target": { "file": "fs/smb/server/smb2pdu.c", "function": "ntlm_authenticate" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-d58f53c5", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "285264208687278024901637539006189605044", "207560040213947380635425744798639138996", "305107058874706933895498668935492880342", "335837611950382568727926128165713522239" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eb8015492bcc84e40646390e50a862b2c0529c9", "target": { "file": "fs/smb/server/connection.h" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-de24669a", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "285264208687278024901637539006189605044", "207560040213947380635425744798639138996", "305107058874706933895498668935492880342", "335837611950382568727926128165713522239" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd1de9268745f0eac83a430db7afc32cbd62e84b", "target": { "file": "fs/ksmbd/connection.h" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-e08ea29f", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "179581286184044102726780366217309315113", "143767885951431437711713951699032310762", "100824104865920471404982477336359565477", "240292084032908946564483902042099963062", "57037373127744311676002620922702891978", "102591679510375589993403089052498776314", "226290367302525170155811860398919631569", "228889114383831637098614755800778608783", "221751455147899572471973339060696383652", "188932336293924472856553504756249171544", "204889774536067331753772101133289230799", "49644327582516830443749732819771666905", "55432063812886508874862323464678585033", "12951196098054199693269195011887848503", "85191560012864444925403838780973885737", "66424255858502825296268129030118389823", "206358797291539810422357043259370505019", "282945632098979069634632218244528178527" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92e470163d96df8db6c4fa0f484e4a229edb903d", "target": { "file": "fs/smb/server/smb2pdu.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-f983b6ff", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "148765154944186602744265894516180501902", "106214534844140801233061388012600068596", "146258116417619815715645179174152612372", "261283539232400392378315230916668007651", "14753691145991153427331571610470429895", "94696208058294605739199913111990437860" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2b21ef1ea4cf632d19b3a7cc4d4245b8e63202a", "target": { "file": "fs/smb/server/asn1.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2024-26594-fd2d8fe3", "signature_type": "Function", "digest": { "function_hash": "59105666598587309568938687501043313112", "length": 2755.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd1de9268745f0eac83a430db7afc32cbd62e84b", "target": { "file": "fs/ksmbd/smb2pdu.c", "function": "ntlm_authenticate" }, "deprecated": false, "signature_version": "v1" } ] }