A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 24, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1035-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1025-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1010-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1010-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1010-raspiUpgrade linux-image-5.15.0-1037-intel-iotgUpgrade linux-image-5.15.0-1039-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-6.2.0-1010-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1043-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-5.15.0-79-genericUpgrade linux-image-6.2.0-1009-awsUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-5.15.0-1030-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-79-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1035-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-27-generic-64kUpgrade linux-image-5.15.0-1039-gcpUpgrade linux-image-5.15.0-1042-awsUpgrade linux-image-6.2.0-1011-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1007-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-79-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-79-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1040-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1030-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1041-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-27-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.2.0-27-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1009-oracleUpgrade linux-image-5.15.0-1039-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-79-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1009-azure | Aug 14, 2023 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub