Log in Start free

Vulnerability · Published Jul 24, 2023 · Assigned by redhat

CVE-2023-32248Tree connection null pointer dereference denial-of-service vulnerability

High 7.5

In plain English

A high-severity null pointer dereference in Fedora from Fedora. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.1% (higher than 91% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)4.1%top 9.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.37-1DEBIAN-CVE-2023-32248
Debian:13linux6.3.7-1DEBIAN-CVE-2023-32248
Debian:14linux6.3.7-1DEBIAN-CVE-2023-32248
Ubuntu:22.04:LTSlinux5.15.0-79.86USN-6300-1
Ubuntu:22.04:LTSlinux5.15.0-79.86UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-aws5.15.0-1042.47USN-6300-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1042.47UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-azure5.15.0-1045.52USN-6332-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1045.52UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1044.51.1UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1045.52.1USN-6332-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-gcp5.15.0-1039.47UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-gcp5.15.0-1039.47USN-6300-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-gke5.15.0-1039.44USN-6311-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1039.44UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1025.30UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1025.30USN-6311-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-ibm5.15.0-1035.38USN-6300-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1035.38UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1037.42USN-6300-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1037.42UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-kvm5.15.0-1039.44USN-6300-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1039.44UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-79.88UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-79.88USN-6300-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1030.30USN-6300-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1030.30UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-nvidia-6.26.2.0-1010.10UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1016.16UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1002.2UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1014.14UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-oracle5.15.0-1040.46USN-6300-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1040.46UBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-raspi5.15.0-1035.38USN-6300-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1035.38UBUNTU-CVE-2023-32248
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-32248
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-32248

Affected products (as reported)

VendorProductVersions
n/a kernel see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Fedora Fedora see references

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References