Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32254

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

Published

2023-07-10T16:15:52.470

Last Modified

2024-11-21T08:02:59.120

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Secondary
CWE-362
Type: Primary
CWE-362

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 5.15.145	Yes
Operating System	linux	linux_kernel	< 6.1.28	Yes
Operating System	linux	linux_kernel	< 6.2.15	Yes
Operating System	linux	linux_kernel	< 6.3.2	Yes
Application	netapp	hci_management_node	-	Yes
Hardware	netapp	h300s	-	Yes
Hardware	netapp	h410s	-	Yes
Hardware	netapp	h500s	-	Yes
Hardware	netapp	h700s	-	Yes

References

https://access.redhat.com/security/cve/CVE-2023-32254 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2191658 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20230824-0004/ Third Party Advisory ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-23-702/ Patch, Third Party Advisory, VDB Entry ([email protected])
https://access.redhat.com/security/cve/CVE-2023-32254 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2191658 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20230824-0004/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-23-702/ Patch, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)