An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 18, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-starfiveUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-intelUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1060-azureUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.2.0-36-genericUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1015-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-virtualUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.2.0-36-generic-lpae | Aug 14, 2023 | Jul 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub