The vulnerability of the smb2_set_ea() function in the fs/smb/server/smb2misc.c module of the SMB subsystem in the Linux operating system allows a remote attacker to gain access to protected information.

🗓️ 16 Nov 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Remote attacker can access protected information via smb2_set_ea vulnerability in smb2misc.c on Linux SMB server due to operations outside buffer boundaries.

Reporter	Title	Published	Views	Family All 28
ATTACKERKB	CVE-2023-39176	18 Nov 202410:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в linux-5.10, linux-5.15, linux-6.1	31 Oct 202516:38	–	astralinux
Chainguard	CVE-2023-39176 vulnerabilities	9 Jan 202619:17	–	cgr
Circl	CVE-2023-39176	18 Nov 202412:22	–	circl
CNNVD	Linux kernel 安全漏洞	18 Nov 202400:00	–	cnnvd
CNVD	Linux kernel out-of-bounds read vulnerability (CNVD-2024-45872)	21 Nov 202400:00	–	cnvd
CVE	CVE-2023-39176	18 Nov 202409:50	–	cve
Cvelist	CVE-2023-39176 Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability	18 Nov 202409:50	–	cvelist
Debian CVE	CVE-2023-39176	18 Nov 202409:50	–	debiancve
EUVD	EUVD-2023-42911	3 Oct 202520:07	–	euvd

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/linus/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c
git	www.git.kernel.org/linus/79ed288cef201f1f212dfb934bcaac75572fb8f6
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-586/
lore	www.lore.kernel.org/lkml/CAH2r5mv+Sy5mrZThrQUf1na-mg-B9DiLd5fkYs9sPo97GWirCA@mail.gmail.com/
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.127
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.46
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.11
web	www.web.nvd.nist.gov/view/vuln/detail

16 Nov 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.5

CVSS 27.8

EPSS0.00663

smb2_set_ea smb2misc.c linux_smb information_disclosure remote_attack buffer_boundaries