by Kastro CVE-2023-52755
Linux Linux — ksmbd: fix slab out of bounds write in smb_inherit_dacl()
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.
Affected
ProductAffectedFixed inSource
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < aaf0a07d60887d6c36fc46a24de0083744f07819aaf0a07d60887d6c36fc46a24de0083744f07819CNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 8387c94d73ec66eb597c7a23a8d9eadf64bfbafa8387c94d73ec66eb597c7a23a8d9eadf64bfbafaCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 09d9d8b40a3338193619c14ed4dc040f4f119e7009d9d8b40a3338193619c14ed4dc040f4f119e70CNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 712e01f32e577e7e48ab0adb5fe550646a3d93cb712e01f32e577e7e48ab0adb5fe550646a3d93cbCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < eebff19acaa35820cb09ce2ccb3d21bee2156ffbeebff19acaa35820cb09ce2ccb3d21bee2156ffbCNA
Linux5.155.15.140CNA
linux_kernel1da177e4c3f4 – < aaf0a07d6088aaf0a07d6088CISA-ADP
linux_kernel1da177e4c3f4 – < 8387c94d73ec8387c94d73ecCISA-ADP
linux_kernel1da177e4c3f4 – < 09d9d8b40a3309d9d8b40a33CISA-ADP
linux_kernel1da177e4c3f4 – < 712e01f32e57712e01f32e57CISA-ADP
linux_kernel1da177e4c3f4 – < eebff19acaa3eebff19acaa3CISA-ADP
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total