CVE-2023-52442: ksmbd: validate session id and tree id in compound request
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate session id and tree id in compound request
smb2getmsg() in smb2getksmbdtcon() and smb2checkusersession() will always return the first request smb2 header in a compound request. if SMB2TREECONNECTHE is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbdreqbufnext() to get current command in compound.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52442?
CVE-2023-52442 has a severity rating that indicates it could potentially allow unauthorized access to system resources.
How do I fix CVE-2023-52442?
To remediate CVE-2023-52442, update your Linux kernel to one of the patched versions available in your distribution.
What versions of the Linux kernel are affected by CVE-2023-52442?
CVE-2023-52442 affects Linux kernel versions from 5.15 to 6.5-rc3.
What is the purpose of the vulnerable functions in CVE-2023-52442?
The vulnerable functions in CVE-2023-52442, `smb2_get_msg()` and `smb2_check_user_session()`, are designed to handle compound requests in SMB2.
Is CVE-2023-52442 related to network security?
Yes, CVE-2023-52442 is related to network security as it affects the SMB2 protocol implementation in the Linux kernel.