A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-linux | Jul 30, 2024 | Jul 24, 2023 | |
| Ubuntu | ubuntu-upgrade-linux-image-5-15-0-1025-gkeopubuntu-upgrade-linux-image-5-15-0-1030-nvidiaubuntu-upgrade-linux-image-5-15-0-1030-nvidia-lowlatencyubuntu-upgrade-linux-image-5-15-0-1035-ibmubuntu-upgrade-linux-image-5-15-0-1035-raspiubuntu-upgrade-linux-image-5-15-0-1037-intel-iotgubuntu-upgrade-linux-image-5-15-0-1039-gcpubuntu-upgrade-linux-image-5-15-0-1039-gkeubuntu-upgrade-linux-image-5-15-0-1039-kvmubuntu-upgrade-linux-image-5-15-0-1040-oracleubuntu-upgrade-linux-image-5-15-0-1041-awsubuntu-upgrade-linux-image-5-15-0-1042-awsubuntu-upgrade-linux-image-5-15-0-1043-azure-fdeubuntu-upgrade-linux-image-5-15-0-1045-azureubuntu-upgrade-linux-image-5-15-0-1045-azure-fdeubuntu-upgrade-linux-image-5-15-0-79-genericubuntu-upgrade-linux-image-5-15-0-79-generic-64kubuntu-upgrade-linux-image-5-15-0-79-generic-lpaeubuntu-upgrade-linux-image-5-15-0-79-lowlatencyubuntu-upgrade-linux-image-5-15-0-79-lowlatency-64kubuntu-upgrade-linux-image-6-2-0-1007-ibmubuntu-upgrade-linux-image-6-2-0-1009-awsubuntu-upgrade-linux-image-6-2-0-1009-azureubuntu-upgrade-linux-image-6-2-0-1009-oracleubuntu-upgrade-linux-image-6-2-0-1010-kvmubuntu-upgrade-linux-image-6-2-0-1010-lowlatencyubuntu-upgrade-linux-image-6-2-0-1010-lowlatency-64kubuntu-upgrade-linux-image-6-2-0-1010-raspiubuntu-upgrade-linux-image-6-2-0-1011-gcpubuntu-upgrade-linux-image-6-2-0-27-genericubuntu-upgrade-linux-image-6-2-0-27-generic-64kubuntu-upgrade-linux-image-6-2-0-27-generic-lpaeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-lts-22-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-cvmubuntu-upgrade-linux-image-azure-fdeubuntu-upgrade-linux-image-azure-fde-lts-22-04ubuntu-upgrade-linux-image-azure-lts-22-04ubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-22-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-15ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-15ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-intelubuntu-upgrade-linux-image-intel-iotgubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-nvidiaubuntu-upgrade-linux-image-nvidia-lowlatencyubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-20-04cubuntu-upgrade-linux-image-oem-20-04dubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-20-04 | Aug 14, 2023 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub