PT-2023-8716 · Linux+3 · Linux Kernel+3

CVE-2023-52440 · Published 2023-08-29 · Updated 2025-10-04

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified) kernel-image-rpi-un version 6.1.77-alt1

Description The Linux kernel contains a flaw within the ksmbd module, specifically in the ksmbd decode ntlmssp auth blob() function. This issue relates to a heap-based buffer overflow that can occur during session key exchange. The problem arises when the SessionKey.Length within the authblob structure exceeds the expected CIFS KEY SIZE. This can lead to a slub overflow during key exchange operations, as the cifs arc4 crypt function copies data from the client's SessionKey into a session key array without proper size validation. Successful exploitation of this issue could allow a remote attacker to execute arbitrary code.

Recommendations For kernel-image-rpi-un version 6.1.77-alt1, update to the latest available version. For all other affected Linux Kernel versions, update to the latest available version.

Exploit

Fix

Buffer Overflow

Integer Overflow

Weakness Enumeration

CWE-119

CWE-190

CWE-120

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-4263

ALT-PU-2024-4843

BDU:2024-01670

CVE-2023-52440

ZDI-24-229

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Red Os

References · 59

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52440.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-52440 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52440 · Vendor Advisory
• https://git.kernel.org/stable/c/bd554ed4fdc3d38404a1c43d428432577573e809 · Patch
• https://ubuntu.com/security/CVE-2023-52440 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52440 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52440 · Vendor Advisory
• https://git.kernel.org/stable/c/4b081ce0d830b684fdf967abc3696d1261387254 · Patch
• https://git.kernel.org/stable/c/ecd7e1c562cb08e41957fcd4b0e404de5ab38e20 · Patch
• https://zerodayinitiative.com/advisories/ZDI-24-229 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52440 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52440 · Vendor Advisory
• https://git.kernel.org/stable/c/30fd6521b2fbd9b767e438e31945e5ea3e3a2fba · Patch