ZDI-CAN-25282: ZDI-24-1456: Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability
Published Nov 5, 2024
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. However, only systems with ksmbd enabled are vulnerable. The ZDI has assigned a CVSS rating of 8.5.
Affected Software
1 affected component
Linux Kernel
Event History
Nov 5, 2024
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-25282?
The CVSS rating for ZDI-CAN-25282 is 8.5, indicating a high severity vulnerability.
2
How do I fix ZDI-CAN-25282?
To fix ZDI-CAN-25282, ensure that you apply the latest patches and updates for the Linux Kernel with ksmbd disabled if not in use.
3
What systems are affected by ZDI-CAN-25282?
Only systems with ksmbd enabled on the Linux Kernel are affected by ZDI-CAN-25282.
4
Is authentication required to exploit ZDI-CAN-25282?
Yes, authentication is required to exploit ZDI-CAN-25282.
5
What type of vulnerability is ZDI-CAN-25282?
ZDI-CAN-25282 is a remote code execution vulnerability due to a session race condition in ksmbd.