Log in Start free

Vulnerability · Published Feb 21, 2024 · Assigned by Linux

CVE-2023-52440ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

Critical 9.8

In plain English

A critical-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 22.3% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)22.3%top 2.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey from client.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DEBIAN-CVE-2023-52440
Debian:13linux6.5.3-1DEBIAN-CVE-2023-52440
Debian:14linux6.5.3-1DEBIAN-CVE-2023-52440
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1004.4UBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52440
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52440

Affected products (as reported)

VendorProductVersions
Linux Linux c5049d2d73b2dc8e6bb64be633250bad1ae3d9ef – before bd554ed4fdc3d38404a1c43d428432577573e809f9929ef6a2a55f03aac61248c6a3a987b8546f2a – before 30fd6521b2fbd9b767e438e31945e5ea3e3a2fbaf9929ef6a2a55f03aac61248c6a3a987b8546f2a – before 7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4f9929ef6a2a55f03aac61248c6a3a987b8546f2a – before ecd7e1c562cb08e41957fcd4b0e404de5ab38e20f9929ef6a2a55f03aac61248c6a3a987b8546f2a – before 4b081ce0d830b684fdf967abc3696d1261387254
Linux Linux 5.17

References