CVE-2023-52441: ksmbd: fix out of bounds in init_smb2_rsp_hdr()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out of bounds in initsmb2rsphdr()
If client send smb2 negotiate request and then send smb1 negotiate request, initsmb2rsphdr is called for smb1 negotiate request since needneg is set to false. This patch ignore smb1 packets after ->needneg is set to false.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52441?
CVE-2023-52441 has been classified with a medium severity due to its potential to cause out of bounds access in the Linux kernel.
How do I fix CVE-2023-52441?
To fix CVE-2023-52441, you should upgrade to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
What software is affected by CVE-2023-52441?
CVE-2023-52441 affects multiple versions of the Linux kernel, specifically versions ranging from 5.15.0 to 5.15.145, 5.16.0 to 6.1.53, and 6.2.0 to 6.4.16.
What is the cause of CVE-2023-52441?
CVE-2023-52441 is caused by an out of bounds access in the init_smb2_rsp_hdr() function when handling an smb1 negotiate request after an smb2 negotiate request.
When was CVE-2023-52441 resolved?
CVE-2023-52441 was resolved in the Linux kernel with fixes developed and released as part of the ongoing security updates for the kernel.