Lucene search

K
zdiQuentin Minster (@thalium_team)ZDI-23-694
HistoryMay 17, 2023 - 12:00 a.m.

Linux Kernel ksmbd RCU Callback Race Condition Local Privilege Escalation Vulnerability

2023-05-1700:00:00
Quentin Minster (@thalium_team)
www.zerodayinitiative.com
9
vulnerability
linux kernel
ksmbd
local privilege escalation
rcu
race condition
arbitrary code execution
high-privileged code
target system
flaw
lack of proper locking
object
kernel

This vulnerability allows local attackers to execute arbitrary code on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of unloading of the ksmbd driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.

Related for ZDI-23-694