An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 18, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1046-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-83-lowlatency-64kUpgrade linux-image-5.15.0-83-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1011-awsUpgrade linux-image-5.15.0-1044-awsUpgrade linux-image-6.2.0-1012-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-83-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1012-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-starfiveUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1012-kvmUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1032-nvidiaUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1027-gkeopUpgrade linux-image-5.15.0-1041-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1041-gkeUpgrade linux-image-6.2.0-32-generic-lpaeUpgrade linux-image-6.2.0-1013-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1009-ibmUpgrade linux-image-6.2.0-32-generic-64kUpgrade linux-image-6.2.0-1004-starfiveUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1046-azureUpgrade linux-image-6.2.0-1011-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1037-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1011-azureUpgrade linux-image-5.15.0-83-lowlatencyUpgrade linux-image-6.2.0-32-genericUpgrade linux-image-5.15.0-1041-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1032-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1037-ibmUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1012-lowlatency-64kUpgrade linux-image-5.15.0-83-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1039-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1042-oracle | Sep 18, 2023 | Jul 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub