CVE-2024-0565: Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• linux linux kernel6.1.36 and later · before 6.7
• linux linux kernel6.7
• netapp ontap toolsall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (redhat). Independent of NVD's CPE analysis and usually ahead of it.

• Linux kernel

  • 4.19 and later · before 5.10.211affected · semver
  • 5.11 and later · before 5.15.150affected · semver
  • 5.16 and later · before 6.1.69affected · semver
  • 6.2 and later · before 6.6.8affected · semver

• Red Hat Red Hat Enterprise Linux 6

  • all versionsunknown

• Red Hat Red Hat Enterprise Linux 7

  • all versionsunknown
  • all versionsunknown

• Red Hat Red Hat Enterprise Linux 8

  • 0:4.18.0-513.24.1.rt7.326.el8_9 and laternot affected · rpm
  • 0:4.18.0-513.24.1.el8_9 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

  • 0:4.18.0-372.95.1.el8_6 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

  • 0:4.18.0-477.51.1.el8_8 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 9

  • 0:5.14.0-427.13.1.el9_4 and laternot affected · rpm
  • 0:5.14.0-427.13.1.el9_4 and laternot affected · rpm
  • all versionsaffected

• Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

  • 0:5.14.0-284.59.1.el9_2 and laternot affected · rpm
  • 0:5.14.0-284.59.1.rt14.344.el9_2 and laternot affected · rpm

• Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

  • 0:4.18.0-372.95.1.el8_6 and laternot affected · rpm

• Red Hat RHOL-5.7-RHEL-8

  • v5.7.13-16 and laternot affected · rpm
  • v5.7.13-7 and laternot affected · rpm
  • v6.8.1-408 and laternot affected · rpm
  • v5.7.13-19 and laternot affected · rpm
  • v1.0.0-480 and laternot affected · rpm
  • v5.7.13-9 and laternot affected · rpm
  • v0.4.0-248 and laternot affected · rpm
  • v1.14.6-215 and laternot affected · rpm
  • v6.8.1-431 and laternot affected · rpm
  • v1.1.0-228 and laternot affected · rpm

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2023-6915Jan 15, 2024 · Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
  22Monitor
• ← EarlierCVE-2024-0562Jan 15, 2024 · Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c
  31Monitor
• Later →CVE-2024-0582Jan 16, 2024 · Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap
  35Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.