high7.1
CVE-2023-1194
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel.
Impact
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 5.15 before 5.15.145 from 5.16 before 6.1.34 from 6.2 before 6.3.8 Version 6.4 |
| Fedoraproject | Fedora | Version 37 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/CVE-2023-1194
- https://bugzilla.redhat.com/show_bug.cgi?id=2154176
- https://security.netapp.com/advisory/ntap-20231221-0006/
- https://www.spinics.net/lists/stable-commits/msg303065.html
- https://access.redhat.com/security/cve/CVE-2023-1194
- https://bugzilla.redhat.com/show_bug.cgi?id=2154176
- https://security.netapp.com/advisory/ntap-20231221-0006/
- https://www.spinics.net/lists/stable-commits/msg303065.html