CVE-2024-0565

CVE-2024-0565 describes an out-of-bounds memory read vulnerability in the Linux Kernel's SMB Client sub-component, specifically within the receive_encrypted_standard function. This flaw, caused by an integer underflow during a memcpy operation, can lead to a denial of service and affects various Linux Kernel and NetApp ONTAP Tools products. The vulnerability carries a CVSS score of 7.4 (HIGH), indicating a significant risk. It requires adjacent network access and low privileges, with user interaction also being a factor, and has the potential for high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in tools like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, aligning with typical patterns for newly disclosed vulnerabilities.