by Kastro
Paper/Archive/CVE-2023-32249

CVE-2023-32249

Linux Linux — ksmbd: not allow guest user on multichannel

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
33
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 29.8.298 × 206.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: ksmbd: not allow guest user on multichannel This patch return STATUS_NOT_SUPPORTED if binding session is guest.

Affected

ProductAffectedFixed inSource
Linuxf5a544e3bab78142207e0242d22442db85ba1eff – < ed76d3a8910be06cd4e4ba63bf6075bf903945a1ed76d3a8910be06cd4e4ba63bf6075bf903945a1CNA
Linuxf5a544e3bab78142207e0242d22442db85ba1eff – < 1f0490586544455e5be698be2e6c30077b4ec4611f0490586544455e5be698be2e6c30077b4ec461CNA
Linuxf5a544e3bab78142207e0242d22442db85ba1eff – < 4a98e859c4673013385a54084e0cd865695ca0724a98e859c4673013385a54084e0cd865695ca072CNA
Linuxf5a544e3bab78142207e0242d22442db85ba1eff – < 088131b7b01099720a528a72005ff17868705d40088131b7b01099720a528a72005ff17868705d40CNA
Linuxf5a544e3bab78142207e0242d22442db85ba1eff – < 3353ab2df5f68dab7da8d5ebb427a2d265a1f2b23353ab2df5f68dab7da8d5ebb427a2d265a1f2b2CNA
Linux5.155.15.112CNA

Scores by source

Linux (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refgit.kernel.org/stable/c/ed76d3a8910be06cd4e4ba63bf6075bf903945a1refgit.kernel.org/stable/c/1f0490586544455e5be698be2e6c30077b4ec461refgit.kernel.org/stable/c/4a98e859c4673013385a54084e0cd865695ca072refgit.kernel.org/stable/c/088131b7b01099720a528a72005ff17868705d40refgit.kernel.org/stable/c/3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2