« List of all CVEs

CVE-2023-32248

Tree connection null pointer dereference denial-of-service vulnerability

Published: 7/24/2023 Last updated: 8/2/2024 Reserved: 5/5/2023

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 7.5 High CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Opam packages affected (29)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes ortools_solvers orun rawlink rawlink-eio rawlink-lwt restricted shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (18)

Product Vendor Version
Red Hat Enterprise Linux 9 Red Hat < c11e2ec9a780f54982a187ee10ffd1b810715c85
Fedora Fedora 3.10
Red Hat Enterprise Linux 7 Red Hat < 999cff2b6ce3b45c08abf793bf55534777421327
Red Hat Enterprise Linux 9 Red Hat < 2.6.30
Fedora Fedora <= 5.10.*
Red Hat Enterprise Linux 6 Red Hat < 156451a67b93986fb07c274ef6995ff40766c5ad
Red Hat Enterprise Linux 6 Red Hat <= 6.10.*
Red Hat Enterprise Linux 7 Red Hat <= *
Red Hat Enterprise Linux 8 Red Hat < 3.13.3
Red Hat Enterprise Linux 8 Red Hat < 17a0bc9bd697f75cfdf9b378d5eb2d7409c91340
Red Hat Enterprise Linux 7 Red Hat < ce1ee2c8827fb6493e91acbd50f664cf2a972c3d
Red Hat Enterprise Linux 7 Red Hat < 6.2.72
Red Hat Enterprise Linux 8 Red Hat 2.6.30
Red Hat Enterprise Linux 9 Red Hat < 5a3e85c3c397c781393ea5fb2f45b1f60f8a4e6e
Red Hat Enterprise Linux 9 Red Hat <= 5.4.*
Red Hat Enterprise Linux 8 Red Hat < 2da32aed4a97ca1d70fb8b77926f72f30ce5fb4b
kernel n/a <= 6.6.*
kernel n/a < 2fa24d0274fbf913b56ee31f15bc01168669d909

References (16)