Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32258

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

Published

2023-07-24T16:15:11.750

Last Modified

2024-11-21T08:02:59.390

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses

Type: Secondary
CWE-362
Type: Primary
CWE-667

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 5.15.145	Yes
Operating System	linux	linux_kernel	< 6.1.29	Yes
Operating System	linux	linux_kernel	< 6.2.16	Yes
Operating System	linux	linux_kernel	< 6.3.2	Yes
Hardware	netapp	h300s	-	Yes
Hardware	netapp	h410s	-	Yes
Hardware	netapp	h500s	-	Yes
Hardware	netapp	h700s	-	Yes

References

https://access.redhat.com/security/cve/CVE-2023-32258 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2219809 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20230915-0011/ Third Party Advisory ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-CAN-20796/ Patch, Third Party Advisory, VDB Entry ([email protected])
https://access.redhat.com/security/cve/CVE-2023-32258 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2219809 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20230915-0011/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-CAN-20796/ Patch, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)