PT-2023-3673 · Linux+5 · Linux Kernel+5

Chih-Yen Chang · Published 2023-05-16 · Updated 2025-01-13 · CVE-2023-38426

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.4

Description An issue was discovered in the Linux kernel where ksmbd has an out-of-bounds read in smb2 find context vals when create context's name len is larger than the tag length. This issue may allow an attacker to access protected information or cause a denial of service.

Recommendations For Linux kernel versions prior to 6.3.4, update to version 6.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the ksmbd module to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2023-4663

ALT-PU-2024-4263

ALT-PU-2024-4843

AZL-27538

BDU:2023-03957

CVE-2023-38426

OESA-2023-1467

OESA-2023-1468

OESA-2023-1471

USN-6338-1

USN-6338-2

USN-6339-1

USN-6339-2

USN-6339-3

USN-6339-4

USN-6344-1

USN-6350-1

USN-6351-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 72

• https://ubuntu.com/security/notices/USN-6350-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/ksmbd?id=02f76c401d17e409ed45bf7887148fcc22c93c85 · Patch
• https://ubuntu.com/security/notices/USN-6338-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2898 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6338-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1467 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6339-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-32250 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-38426 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38428 · Security Note
• https://ubuntu.com/security/notices/USN-6344-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1471 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-38426 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32248 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16 · Vendor Advisory