Vulnerability · Published Jul 24, 2023 · Assigned by redhat
CVE-2023-32252Session null pointer dereference denial-of-service vulnerability
High 7.5
In plain English
A high-severity null pointer dereference in Fedora from Fedora. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.1% (higher than 91% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)4.1%top 9.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.37-1 | DEBIAN-CVE-2023-32252 |
| Debian:13 | linux | 6.3.7-1 | DEBIAN-CVE-2023-32252 |
| Debian:14 | linux | 6.3.7-1 | DEBIAN-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux | 5.15.0-94.104 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux | 5.15.0-94.104 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1053.58 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1053.58 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1011.11~22.04.1 | USN-6338-1 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1011.11~22.04.1 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1056.64 | USN-6626-3 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1056.64 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1056.64.1 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1056.64.1 | USN-6626-3 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1051.59 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1051.59 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1013.13~22.04.1 | USN-6338-2 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1013.13~22.04.1 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1050.55 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1050.55 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1036.42 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1036.42 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-32.32~22.04.1 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-32.32~22.04.1 | USN-6338-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1046.49 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1046.49 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1047.53 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1047.53 | USN-6628-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1050.55 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1050.55 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-94.104 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-94.104 | USN-6626-2 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1012.12~22.04.1 | USN-6338-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1012.12~22.04.1 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1044.44 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1044.44 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 6.2.0-1010.10 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1022.22 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1009.9 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1014.14 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1051.57 | USN-6626-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1051.57 | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1046.49 | USN-6626-2 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1046.49 | UBUNTU-CVE-2023-32252 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-32252 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1027.31 | UBUNTU-CVE-2023-32252 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | kernel | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Fedora | Fedora | see references |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://access.redhat.com/security/cve/CVE-2023-32252 vdb-entry, x_refsource_REDHAT
- RHBZ#2219815 issue-tracking, x_refsource_REDHAT
- https://security.netapp.com/advisory/ntap-20231124-0001/
- https://www.zerodayinitiative.com/advisories/ZDI-CAN-20590/