Lucene search

PRIOn knowledge basePRION:CVE-2023-32258

HistoryJul 24, 2023 - 4:15 p.m.

Sql injection

2023-07-2416:15:00

PRIOn knowledge base

www.prio-n.com

linux

kernel

smb server

code execution

vulnerability

locking

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

A flaw was found in the Linux kernel’s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

CPENameOperatorVersion
linux_kernelge6.3
linux_kernellt6.3.2
linux_kernelge6.2
linux_kernellt6.2.16
linux_kernelge5.15
linux_kernellt6.1.29

Name	Operator	Version
linux_kernel	ge	6.3
linux_kernel	lt	6.3.2
linux_kernel	ge	6.2
linux_kernel	lt	6.2.16
linux_kernel	ge	5.15
linux_kernel	lt	6.1.29

References

access.redhat.com/security/cve/CVE-2023-32258

bugzilla.redhat.com/show_bug.cgi?id=2219809

security.netapp.com/advisory/ntap-20230915-0011/

www.zerodayinitiative.com/advisories/ZDI-CAN-20796/