Linux Distros Unpatched Vulnerability : CVE-2023-54162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix possible memory leak in smb2lock argv needs to be free when setupasyncwork fails or when the current process is woken up. CVE-2023-54162 Note that...

CVE-2023-54162 ksmbd: fix possible memory leak in smb2_lock()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2lock argv needs to be free when setupasyncwork fails or when the current process is woken up...

CVE-2023-54162

CVE-2023-54162 affects the Linux kernel’s ksmbd smb2_lock() memory management. The issue is a memory leak where argv was not freed when setup_async_work fails or when the process is awakened. A patched kernel fix addresses this leak (remediation details vary by vendor/release; CVSS v3.1 base scor...

CVE-2023-1193

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...