CVE-2023-32252: Linux Kernel ksmbd Session NULL Pointer Dereference Denial-of-Service Vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Other sources
A NULL pointer dereference issue was found in ksmbd, a high-performance in-kernel SMB server. Quoting ZDI security advisory [1]:
"This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable.
The specific flaw exists within the handling of SMB2LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system."
[1] https://www.zerodayinitiative.com/advisories/ZDI-CAN-20590/
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32252?
CVE-2023-32252 has a high severity rating due to the potential for remote code execution via improperly validated SMB2_LOGOFF commands.
How do I fix CVE-2023-32252?
To remediate CVE-2023-32252, update the Linux kernel to version 6.4 or higher, or to specific patched versions listed by your distribution.
Which Linux kernel versions are affected by CVE-2023-32252?
CVE-2023-32252 affects Linux kernel versions from 5.15 to 6.3.9, and all versions below 6.4.
What types of attacks can exploit CVE-2023-32252?
An attacker can exploit CVE-2023-32252 to execute remote code by sending crafted SMB2_LOGOFF commands.
Is the Linux kernel's ksmbd the only affected component in CVE-2023-32252?
Yes, the specific vulnerability in CVE-2023-32252 is related solely to the ksmbd component of the Linux kernel.