A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 24, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1039-kvmUpgrade linux-image-5.15.0-1040-oracleUpgrade linux-image-5.15.0-1041-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1009-azureUpgrade linux-image-5.15.0-79-generic-lpaeUpgrade linux-image-6.2.0-27-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1009-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-79-lowlatencyUpgrade linux-image-5.15.0-1030-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-5.15.0-79-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.2.0-27-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1039-gkeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1010-lowlatencyUpgrade linux-image-5.15.0-1035-raspiUpgrade linux-image-5.15.0-79-lowlatency-64kUpgrade linux-image-5.15.0-79-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1030-nvidiaUpgrade linux-image-6.2.0-1010-raspiUpgrade linux-image-6.2.0-1009-awsUpgrade linux-image-5.15.0-1035-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1045-azureUpgrade linux-image-5.15.0-1025-gkeopUpgrade linux-image-6.2.0-27-generic-64kUpgrade linux-image-6.2.0-1010-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1037-intel-iotgUpgrade linux-image-6.2.0-1010-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1007-ibmUpgrade linux-image-6.2.0-1011-gcpUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1042-awsUpgrade linux-image-5.15.0-1039-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1043-azure-fde | Aug 14, 2023 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub