In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out of bounds read in smb2_sess_setup
ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2_sess_setup().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-kvmUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1015-awsUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1060-azureUpgrade linux-image-virtualUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-starfiveUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-azure-lts-22.04 | Nov 1, 2023 | Oct 31, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub