CVE-2023-38430: Critical severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38430?
CVE-2023-38430 is classified as a high severity vulnerability due to its potential for exploitation via out-of-bounds read in the Linux kernel.
How do I fix CVE-2023-38430?
To fix CVE-2023-38430, users should upgrade to Linux kernel versions 6.3.10 or later, or apply the available patches.
Which systems are affected by CVE-2023-38430?
CVE-2023-38430 affects various versions of the Linux kernel, specifically those before 6.3.9, along with certain NetApp hardware devices.
What could attackers exploit in CVE-2023-38430?
Attackers could exploit CVE-2023-38430 to perform out-of-bounds reads, potentially leading to information disclosure.
When was CVE-2023-38430 last updated?
CVE-2023-38430 was last updated on 29 November 2024.