An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 18, 2023 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1037-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-32-generic-lpaeUpgrade linux-image-5.15.0-1039-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1046-azureUpgrade linux-image-5.15.0-83-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1032-nvidiaUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-1012-lowlatencyUpgrade linux-image-5.15.0-1032-nvidia-lowlatencyUpgrade linux-image-6.2.0-1004-starfiveUpgrade linux-image-5.15.0-83-generic-lpaeUpgrade linux-image-6.2.0-32-genericUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1012-raspiUpgrade linux-image-5.15.0-1041-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1037-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-32-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1042-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1011-azureUpgrade linux-image-5.15.0-1027-gkeopUpgrade linux-image-6.2.0-1009-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-83-lowlatency-64kUpgrade linux-image-6.2.0-1012-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-83-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.2.0-1012-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1044-awsUpgrade linux-image-5.15.0-1041-kvmUpgrade linux-image-5.15.0-83-generic-64kUpgrade linux-image-6.2.0-1013-gcpUpgrade linux-image-6.2.0-1011-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1046-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1011-awsUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1041-gke | Sep 18, 2023 | Jul 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub