ZDI-CAN-25040: ZDI-24-1688: Linux Kernel ksmbd PreviousSessionId Race Condition Remote Code Execution Vulnerability
Published Dec 12, 2024
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. However, only systems with ksmbd enabled are vulnerable. The ZDI has assigned a CVSS rating of 8.5.
Affected Software
1 affected component
Linux Kernel
Event History
Dec 12, 2024
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-25040?
ZDI-CAN-25040 has a CVSS rating of 8.5, indicating a high severity level.
2
How do I fix ZDI-CAN-25040?
To mitigate ZDI-CAN-25040, consider disabling ksmbd if it is not needed or apply available patches from your Linux distribution.
3
Who is affected by ZDI-CAN-25040?
ZDI-CAN-25040 primarily affects systems running the Linux Kernel with ksmbd enabled.
4
What type of vulnerability is ZDI-CAN-25040?
ZDI-CAN-25040 is classified as a race condition vulnerability that can lead to remote code execution.
5
Is authentication required to exploit ZDI-CAN-25040?
Yes, authentication is required to exploit ZDI-CAN-25040.