Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-52755

ksmbd: fix slab out of bounds write in smb_inherit_dacl()

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < aaf0a07d60887d6c36fc46a24de0083744f07819affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 8387c94d73ec66eb597c7a23a8d9eadf64bfbafaaffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 09d9d8b40a3338193619c14ed4dc040f4f119e70affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 712e01f32e577e7e48ab0adb5fe550646a3d93cbaffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < eebff19acaa35820cb09ce2ccb3d21bee2156ffbaffected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.140 to ≤ 5.15.*unaffected
  • 6.1.64 to ≤ 6.1.*unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References