Lucene search
HistoryJul 18, 2023 - 12:15 a.m.
CVE-2023-38426
cve-2023
linux kernel
out-of-bounds read
security issue
nvd
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
8.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.6%
An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context’s name_len is larger than the tag length.
Affected configurations
Node
linuxlinux_kernelRange5.15–5.15.113
ORlinuxlinux_kernelRange5.16–6.1.30
ORlinuxlinux_kernelRange6.2–6.3.4
Node
netappsolidfire_\&_hci_management_nodeMatch-
ORnetappsolidfire_\&_hci_storage_nodeMatch-
ORnetapph300sMatch-
ORnetapph410sMatch-
ORnetapph500sMatch-
ORnetapph700sMatch-
Related
cbl_mariner
cbl_mariner
CVE-2023-38426 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-38426 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
cvelist
cvelist
CVE-2023-38426
2023-07-17 00:00:00
nvd
nvd
CVE-2023-38426
2023-07-18 00:15:09
prion
prion
Out-of-bounds
2023-07-18 00:15:00
ubuntucve
ubuntucve
CVE-2023-38426
2023-07-18 00:00:00
debiancve
debiancve
CVE-2023-38426
2023-07-18 00:15:09
openvas
openvas
Ubuntu: Security Advisory (USN-6339-1)
2023-09-06 00:00:00
Ubuntu: Security Advisory (USN-6350-1)
2023-09-07 00:00:00
Ubuntu: Security Advisory (USN-6351-1)
2023-09-07 00:00:00
ubuntu
ubuntu
Linux kernel (Intel IoTG) vulnerabilities
2023-09-18 00:00:00
Linux kernel vulnerabilities
2023-09-08 00:00:00
Linux kernel vulnerabilities
2023-09-11 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6339-1)
2023-09-05 00:00:00
Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6339-4)
2023-09-18 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6350-1)
2023-09-06 00:00:00
osv
osv
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-raspi vulnerabilities
2023-09-11 18:34:01
linux-gke, linux-gkeop vulnerabilities
2023-09-06 21:41:12
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
8.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.6%
Related for CVE-2023-38426