In the Linux kernel, the following vulnerability has been resolved: ksmbd:
fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write
is caused by that offsets is bigger than pntsd allocation size. This patch
add the check to validate 3 offsets using allocation size.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 23.10 | noarch | linux | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 14.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 16.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws | < any | UNKNOWN |
git.kernel.org/linus/eebff19acaa35820cb09ce2ccb3d21bee2156ffb (6.7-rc1)
git.kernel.org/stable/c/09d9d8b40a3338193619c14ed4dc040f4f119e70
git.kernel.org/stable/c/712e01f32e577e7e48ab0adb5fe550646a3d93cb
git.kernel.org/stable/c/8387c94d73ec66eb597c7a23a8d9eadf64bfbafa
git.kernel.org/stable/c/aaf0a07d60887d6c36fc46a24de0083744f07819
git.kernel.org/stable/c/eebff19acaa35820cb09ce2ccb3d21bee2156ffb
launchpad.net/bugs/cve/CVE-2023-52755
nvd.nist.gov/vuln/detail/CVE-2023-52755
security-tracker.debian.org/tracker/CVE-2023-52755
www.cve.org/CVERecord?id=CVE-2023-52755