Design/Logic Flaw

2023-07-2416:15:00

PRIOn knowledge base

www.prio-n.com

linux

ksmbd

smb server

flaw

logic flaw

denial-of-service

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

A flaw was found in the Linux kernel’s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

CPENameOperatorVersion
linux_kernelge6.3
linux_kernellt6.3.2
linux_kernelge6.2
linux_kernellt6.2.15
linux_kernelge5.16
linux_kernellt6.1.28
linux_kernelge5.15
linux_kernellt5.15.111

Name	Operator	Version
linux_kernel	ge	6.3
linux_kernel	lt	6.3.2
linux_kernel	ge	6.2
linux_kernel	lt	6.2.15
linux_kernel	ge	5.16
linux_kernel	lt	6.1.28
linux_kernel	ge	5.15
linux_kernel	lt	5.15.111