CVE-2023-52755: ksmbd: fix slab out of bounds write in smb_inherit_dacl()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slab out of bounds write in smbinheritdacl()
slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52755?
The severity of CVE-2023-52755 is categorized as medium due to the potential for out-of-bounds memory access in the kSMBD component.
How do I fix CVE-2023-52755?
To fix CVE-2023-52755, upgrade your Linux kernel to versions 5.15.140, 6.1.64, or any version from 6.2 to 6.6.3 or later.
Who is affected by CVE-2023-52755?
CVE-2023-52755 affects users running specific versions of the Linux kernel, particularly those between 5.15 and 6.6.3.
What type of vulnerability is CVE-2023-52755?
CVE-2023-52755 is a memory corruption vulnerability related to slab out-of-bounds write in the Linux kernel.
When was CVE-2023-52755 resolved?
CVE-2023-52755 was resolved with a patch released in the Linux kernel after the discovery of the vulnerability.