Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-52441

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_neg is set to false. This patch ignore smb1 packets after ->need_neg is set to false.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 51a8534c0f35c0401e45f1055f914729cad98bf9 to < 5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40baffected
  • 0b3ec5671ac06829ccebdaeec05acedfec327f42 to < 330d900620dfc9893011d725b3620cd2ee0bc2bcaffected
  • 39b291b86b5988bf8753c3874d5c773399d09b96 to < aa669ef229ae8dd779da9caa24e254964545895faffected
  • 39b291b86b5988bf8753c3874d5c773399d09b96 to < 536bb492d39bb6c080c92f31e8a55fe9934f452baffected
  • cc32cd98a0aee4cc3eb611cbce11795b1aaa738aaffected
  • 5.15.105 to < 5.15.145affected
  • 6.1.22 to < 6.1.53affected
  • 6.2.9 to < 6.3affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 5.15.145 to ≤ 5.15.*unaffected
  • 6.1.53 to ≤ 6.1.*unaffected
  • 6.4.16 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References