An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 18, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-starfiveUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1016-azureUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-6.2.0-1015-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-awsUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-oem-20.04c | Aug 14, 2023 | Jul 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub