CVE-2023-54250: ksmbd: avoid out of bounds access in decode_preauth_ctxt()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: avoid out of bounds access in decodepreauthctxt()
Confirm that the accessed pnegctxt->HashAlgorithms address sits within the SMB request boundary; deassemblenegcontexts() only checks that the eight byte smb2negcontext header + (client controlled) DataLength are within the packet boundary, which is insufficient.
Checking for sizeof(struct smb2preauthnegcontext) is overkill given that the type currently assumes SMB311SALTSIZE bytes of trailing Salt.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54250?
CVE-2023-54250 is classified as a high-severity vulnerability due to its potential to allow out-of-bounds memory access.
How does CVE-2023-54250 affect Linux ksmbd?
CVE-2023-54250 affects Linux ksmbd by allowing an out-of-bounds access in the decode_preauth_ctxt() function.
How do I fix CVE-2023-54250?
To fix CVE-2023-54250, ensure that you update to the latest version of the Linux kernel that includes the security patch.
Can CVE-2023-54250 lead to data breaches?
Yes, CVE-2023-54250 can potentially lead to data breaches by allowing unauthorized access to kernel memory.
Is CVE-2023-54250 exploitable remotely?
Yes, CVE-2023-54250 may be exploited remotely if the vulnerable system is accessible over a network.