ZDI-23-702: Linux Kernel ksmbd Tree Connection Race Condition Remote Code Execution Vulnerability
Published May 17, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable.
Affected Software
1 affected component
Linux Kernel
Event History
May 17, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Feb 26, 2025
Advisory Published
via ZDI·03:45 PM
Frequently Asked Questions
1
What is the severity of ZDI-23-702?
The severity of ZDI-23-702 is critical with a severity value of 9.
2
What is the affected software for ZDI-23-702?
The affected software for ZDI-23-702 is Linux Kernel.
3
Is authentication required to exploit ZDI-23-702?
No, authentication is not required to exploit ZDI-23-702.
4
Which systems are vulnerable to ZDI-23-702?
Only systems with ksmbd enabled are vulnerable to ZDI-23-702.
5
How can I fix ZDI-23-702?
Currently, there is no known fix for ZDI-23-702. It is recommended to follow the suggestions provided by the vendor or the advisory.