In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out of bounds read in smb2_sess_setup
ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2_sess_setup().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1060-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1015-awsUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-102-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-nvidia-6.2Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-6.2.0-1016-kvm | Nov 1, 2023 | Oct 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub