CVE-2023-32252 Session null pointer dereference denial-of-service vulnerability

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to creat...

CVE-2023-32257 Session race condition remote code execution vulnerability

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage th...

CVE-2023-32257

CVE-2023-32257 affects the Linux kernel ksmbd (the in-kernel SMB server). The vulnerability stems from lack of proper locking when processing SMB2_SESSION_SETUP and SMB2_LOGOFF, enabling an attacker to execute code in the kernel context. The initial description documents the root cause and impact...

CVE-2023-32252

CVE-2023-32252 affects the Linux kernel ksmbd (the in-kernel SMB server). The flaw occurs in the handling of SMB2_LOGOFF commands due to improper validation of a pointer before access. This can allow an attacker to trigger a denial-of-service on the affected system. The description and connected ...

CVE-2023-32258

CVE-2023-32258 affects the Linux kernel ksmbd SMB server. The flaw occurs in processing SMB2_LOGOFF and SMB2_CLOSE due to missing locking when operating on an object, allowing code execution in kernel context. Connected documents confirm this is a ksmbd in-kernel vulnerability with high impact (C...

CVE-2023-32252

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to creat...

CVE-2023-32247

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2SESSIONSETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a...

CVE-2023-32247

CVE-2023-32247 affects the Linux kernel ksmbd SMB server. The flaw is in SMB2_SESSION_SETUP handling and stems from lack of resource-control, enabling a remote attacker to trigger a denial-of-service (A: HIGH, CVSS 3.1: 7.5). The issue is exploitable over network with no privileges required and n...

The vulnerability of the function `ksmbd_smb2_check_message()` in the file system KSMBD’s `fs/smb/server/smb2misc.c` file allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...

The vulnerability of the `ksmbd_verify_smb_message()` function in the `fs/smb/server/smb_common.c` file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdverifysmbmessage function in the fs/smb/server/smbcommon.c file of the KSMBD file system in the Linux operating system is related to the lack of control over the request identifier. Exploiting this vulnerability could allow a remote attacker to access protected...

CVE-2023-32257: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage th...

CVE-2023-32252: NULL Pointer Dereference

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to creat...

CVE-2023-32248: NULL Pointer Dereference

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2TREECONNECT and SMB2QUERYINFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this...

CVE-2023-32258: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

CVE-2023-32247: Missing Release of Memory after Effective Lifetime

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2SESSIONSETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a...

The vulnerability of the `ksmbd_conn_handler_loop()` function in the `fs/ksmbd/connection.c` file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdconnhandlerloop function in the fs/ksmbd/connection.c file of the KSMBD file system of the Linux operating system is related to access to data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information o...

The vulnerability of the session_user() function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the sessionuser function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause servic...

The vulnerability of the `ksmbd_conn_handler_loop()` function in the `fs/smb/server/connection.c` file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdconnhandlerloop function in the fs/smb/server/connection.c file of the KSMBD file system of the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...

PT-2023-8703 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the improper validation of session id and tree id in compound requests in the Linux kernel's ksmbd module. Specifically, the smb2 get msg function in smb2 get...

Linux Kernel ksmbd Session Setup Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability. However, only systems with ksmbd enabled are vulnerable. The specific flaw exists within the handling of session...