PT-2023-3670 · Linux+5 · Linux Kernel+5
Published
2023-05-16
·
Updated
2025-01-13
·
CVE-2023-38429
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.3.4
Description
An issue was discovered in the Linux kernel that may lead to out-of-bounds access due to an off-by-one error in memory allocation. This error is caused by the
ksmbd smb2 check message function in fs/ksmbd/connection.c. The vulnerability is related to the ksmbd conn handler loop() function and may allow an attacker to access protected information or cause a denial of service.Recommendations
For Linux kernel versions prior to 6.3.4, update to version 6.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the
ksmbd module to minimize the risk of exploitation.Fix
Memory Corruption
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu