Name: CVE-2023-32255: Missing Release of Resource after Effective Lifetime
Creator: Rapid7
Published: 2025-08-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-32255, CWE-772, CVSS 5.3, EPSS 0.00453

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Aug 4, 2025	Aug 4, 2025
Ubuntu	—	Upgrade linux-kvmUpgrade linux-xilinx-zynqmpUpgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-oracle-5.15Upgrade linux-nvidia-tegraUpgrade linux-gkeopUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linuxUpgrade linux-intel-iotgUpgrade linux-azureUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-fde-5.15Upgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegra-5.15Upgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iot-realtime	Aug 7, 2025	Aug 2, 2025

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business