CVE-2023-32246: ksmbd: call rcu_barrier() in ksmbd_server_exit()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcubarrier() in ksmbdserverexit()
racy issue is triggered the bug by racing between closing a connection and rmmod. In ksmbd, rcubarrier() is not called at module unload time, so nothing prevents ksmbd from getting unloaded while it still has RCU callbacks pending. It leads to trigger unintended execution of kernel code locally and use to defeat protections such as Kernel Lockdown
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32246?
CVE-2023-32246 has a medium severity level due to its potential exploitation during the closing of connections in the Linux kernel.
How do I fix CVE-2023-32246?
To resolve CVE-2023-32246, upgrade the Linux kernel to a version where the vulnerability has been patched.
What is the impact of CVE-2023-32246?
The impact of CVE-2023-32246 involves potential system instability or crashes when the ksmbd module is unloaded while connections are active.
Who is affected by CVE-2023-32246?
CVE-2023-32246 affects systems running vulnerable versions of the Linux kernel with the ksmbd server enabled.
Is CVE-2023-32246 actively being exploited?
There is no specific information indicating that CVE-2023-32246 is actively being exploited in the wild.