ZDI-24-1688: Linux Kernel ksmbd PreviousSessionId Race Condition Remote Code Execution Vulnerability
Published Dec 12, 2024
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. However, only systems with ksmbd enabled are vulnerable. The ZDI has assigned a CVSS rating of 8.5.
Affected Software
1 affected component
Linux Kernel
Event History
Dec 12, 2024
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-24-1688?
The severity of ZDI-24-1688 is high due to its potential for remote code execution.
2
How do I fix ZDI-24-1688?
To fix ZDI-24-1688, update your Linux Kernel to the latest version that includes the security patches addressing this vulnerability.
3
Who is affected by ZDI-24-1688?
ZDI-24-1688 affects systems running the Linux Kernel with ksmbd enabled.
4
Is authentication required to exploit ZDI-24-1688?
Yes, authentication is required to exploit ZDI-24-1688.
5
What type of attack does ZDI-24-1688 facilitate?
ZDI-24-1688 facilitates a race condition that can lead to remote code execution.