PT-2023-2815 · Linux+3 · Linux Kernel+3

Published 2023-04-27 · Updated 2026-03-14 · CVE-2023-32249

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to a flaw in the authentication procedure of the ksmbd module in Linux operating systems. This flaw can be exploited by a remote attacker to hijack an active session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-02741

CVE-2023-32249

OESA-2023-1668

OESA-2023-1669

OESA-2023-1670

ZDI-23-697

Affected Products

Astra Linux

Debian

Linux Kernel

Red Os

References · 43

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32249.json · Exploit
• https://git.kernel.org/stable/c/088131b7b01099720a528a72005ff17868705d40 · Patch
• https://osv.dev/vulnerability/OESA-2023-1670 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4881 · Security Note
• https://git.kernel.org/stable/c/4a98e859c4673013385a54084e0cd865695ca072 · Patch
• https://ubuntu.com/security/CVE-2023-32249 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32249 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1669 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-32249 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4921 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32249 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-697 · Security Note
• https://bdu.fstec.ru/vul/2023-02741 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-32249 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32253 · Security Note