CVE-2023-32252

Published: 24 July 2023

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

From the Ubuntu Security Team

Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Notes

also kwnon as ZDI-23-700, ZDI-CAN-20590
needs ksmbd-tools installed to enable the service, which is
not installed by default.
same fix as CVE-2023-32257, CVE-2023-32250

Status

Severity score breakdown

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32252
• https://access.redhat.com/security/cve/CVE-2023-32252
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-20590/
• https://ubuntu.com/security/notices/USN-6338-1
• https://ubuntu.com/security/notices/USN-6344-1
• https://ubuntu.com/security/notices/USN-6338-2
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=2219815
• https://bugzilla.suse.com/show_bug.cgi?id=1211534