CVE-2023-32249: ksmbd: not allow guest user on multichannel
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: not allow guest user on multichannel
This patch return STATUSNOTSUPPORTED if binding session is guest.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update ksmbd behavior to reject guest binding sessions by returning STATUS_NOT_SUPPORTED (ksmbd: do not allow guest user on multichannel).
ksmbd (Linux kernel) binding session guest handling = Return STATUS_NOT_SUPPORTED when binding session is guest
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32249?
The severity of CVE-2023-32249 is classified as moderate.
How do I fix CVE-2023-32249?
To fix CVE-2023-32249, update the Linux kernel to the latest version where this vulnerability has been addressed.
What are the potential impacts of CVE-2023-32249?
The potential impacts of CVE-2023-32249 include unauthorized guest access to multichannel sessions.
Which versions of the Linux kernel are affected by CVE-2023-32249?
CVE-2023-32249 affects specific versions of the Linux kernel prior to the patch release.
Is CVE-2023-32249 a remote code execution vulnerability?
CVE-2023-32249 is not a remote code execution vulnerability but relates to session binding issues for guest users.