The vulnerability of the `ksmbddecode_ntlmssp_auth_blob()` function in the ksmbd module of Linux operating systems allows a hacker to execute arbitrary code.

🗓️ 29 Feb 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Flaw in ksmbddecode_ntlmssp_auth_blob() in ksmbd allows remote code execution via unchecked input size.

Reporter	Title	Published	Views	Family All 73
AstraLinux	Astra Linux - уязвимость в linux-6.1	20 May 202605:53	–	astralinux
GithubExploit	Exploit for CVE-2023-4130	12 Sep 202501:25	–	githubexploit
Circl	CVE-2023-52440	21 Feb 202409:21	–	circl
CNNVD	Linux kernel security vulnerabilities	21 Feb 202400:00	–	cnnvd
CVE	CVE-2023-52440	21 Feb 202407:21	–	cve
Cvelist	CVE-2023-52440 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()	21 Feb 202407:21	–	cvelist
Debian CVE	CVE-2023-52440	21 Feb 202407:21	–	debiancve
NVD	CVE-2023-52440	21 Feb 202408:15	–	nvd
OSV	BELL-CVE-2023-52440	22 Feb 202405:57	–	osv
OSV	CVE-2023-52440 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()	21 Feb 202407:21	–	osv

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/03/18/2
bugzilla	www.bugzilla.suse.com/show_bug.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/4b081ce0d830b684fdf967abc3696d1261387254
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
git	www.git.kernel.org/stable/c/30fd6521b2fbd9b767e438e31945e5ea3e3a2fba
git	www.git.kernel.org/stable/c/4b081ce0d830b684fdf967abc3696d1261387254
git	www.git.kernel.org/stable/c/7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4
git	www.git.kernel.org/stable/c/bd554ed4fdc3d38404a1c43d428432577573e809
git	www.git.kernel.org/stable/c/ecd7e1c562cb08e41957fcd4b0e404de5ab38e20

24 Oct 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 210

CVSS 310

EPSS0.36685

ksmbd module linux operating system auth blob session key length buffer overflow remote code execution