CVE-2022-0565
PHP vulnerability analysis and mitigation

Overview

CVE-2024-0565 is a CIFS Filesystem Decryption vulnerability affecting the Linux kernel. The vulnerability was discovered in the receiveencryptedstandard function of the CIFS client implementation. This security issue was classified as Important by Red Hat and was addressed in kernel updates released in early 2024 (Red Hat Advisory).

Technical details

The vulnerability is an Improper Input Validation issue in the CIFS (Common Internet File System) Filesystem's decryption functionality, specifically in the receiveencryptedstandard function of the client implementation. The issue affects multiple versions of the Linux kernel, including those used in Red Hat Enterprise Linux 8 distributions (Red Hat Advisory).

Impact

The vulnerability could potentially allow remote code execution through the CIFS filesystem client when processing encrypted file system operations (Red Hat Advisory).

Mitigation and workarounds

The vulnerability has been patched in kernel updates. Users are advised to update their systems to the latest kernel version available for their distribution. For Red Hat Enterprise Linux 8 users, this includes updating to kernel version 4.18.0-513.24.1 (Red Hat Advisory).

Additional resources


SourceThis report was generated using AI

Related PHP vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

GHSA-898v-775g-777cCRITICAL9.4
  • PHPPHP
  • neuron-core/neuron-ai
NoYesDec 09, 2025
GHSA-5j8p-438x-rgg5CRITICAL9.3
  • PHPPHP
  • onelogin/php-saml
NoYesDec 09, 2025
GHSA-j8g6-5gqc-mq36HIGH8.2
  • PHPPHP
  • neuron-core/neuron-ai
NoYesDec 09, 2025
GHSA-pvcv-q3q7-266gHIGH8.1
  • PHPPHP
  • filament/filament
NoYesDec 09, 2025
GHSA-6w82-v552-wjw2HIGH7.1
  • PHPPHP
  • shopware/shopware
NoYesDec 09, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management