9.8
Critique
CVE-2023-32254 A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server
Description
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kernel 6.4 | premières → < 6.4-rc1 | 6.4-rc1 |
| Red Hat Enterprise Linux 6 | Versions non publiées | |
| Red Hat Enterprise Linux 7 | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées | |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Fedora | Versions non publiées |
Références
- access.redhat.com access.redhat.com
- RHBZ#2191658 bugzilla.redhat.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de kernel
Les 279 CVE de kernel →
CVE-2024-1312
A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same…
5.1
Moyenne
CVE-2023-6200
A race condition was found in the Linux Kernel
7.5
Élevée
CVE-2023-6560
An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel
5.5
Moyenne
CVE-2023-5972
A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel
7.0
Élevée