CVE-2023-1194: Use-after-free in parse_lease_state()
An out-of-bounds (OOB) memory read flaw was found in parseleasestate in KSMBD implemetation of in-kernel samba server and CIFS in the Linux kernel. When attacker sends CREATE command with malform payload to KSMBD, because of missing check NameOffset in function parseleasestate(), the createcontext object can access invalid memory.
Refer https://www.spinics.net/lists/stable-commits/msg303065.html
Other sources
An out-of-bounds (OOB) memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of NameOffset in the parseleasestate() function, the createcontext object can access invalid memory.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1194?
CVE-2023-1194 is considered a critical vulnerability due to its potential for causing an out-of-bounds memory read, which could lead to arbitrary code execution.
How do I fix CVE-2023-1194?
To fix CVE-2023-1194, update the Linux kernel to version 6.4 or apply the latest patches provided by your distribution.
What versions of Linux are affected by CVE-2023-1194?
CVE-2023-1194 affects multiple versions of the Linux kernel, specifically those between 5.15 and 6.4-rc5.
Can CVE-2023-1194 be exploited remotely?
Yes, CVE-2023-1194 can be exploited remotely by sending a specially crafted CREATE command to the KSMBD service.
What impact does CVE-2023-1194 have on system security?
The impact of CVE-2023-1194 could allow attackers to execute arbitrary code, potentially compromising the security and integrity of affected systems.