PRIOn knowledge basePRION:CVE-2023-32254

HistoryJul 10, 2023 - 4:15 p.m.

Design/Logic Flaw

2023-07-1016:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

linux kernel

smb server

smb2_tree_disconnect

vulnerability

code execution

nvd

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

A flaw was found in the Linux kernel’s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

CPENameOperatorVersion
linux_kernelge6.3
linux_kernellt6.3.2
linux_kernelge6.2
linux_kernellt6.2.15
linux_kernelge5.15
linux_kernellt6.1.28

Name	Operator	Version
linux_kernel	ge	6.3
linux_kernel	lt	6.3.2
linux_kernel	ge	6.2
linux_kernel	lt	6.2.15
linux_kernel	ge	5.15
linux_kernel	lt	6.1.28

References

access.redhat.com/security/cve/CVE-2023-32254

bugzilla.redhat.com/show_bug.cgi?id=2191658

security.netapp.com/advisory/ntap-20230824-0004/

www.zerodayinitiative.com/advisories/ZDI-23-702/