critical9.1
CVE-2023-38430
An issue was discovered in the Linux kernel before 6.3.9.
Impact
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 5.15 before 5.15.145 from 5.16 before 6.1.35 from 6.2 before 6.3.9 |
| Netapp | Hci Management Node | All versions |
| Netapp | H300s | All versions |
| Netapp | H410s | All versions |
| Netapp | H500s | All versions |
| Netapp | H700s | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.9
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=1c1bcf2d3ea061613119b534f57507c377df20f9
- https://security.netapp.com/advisory/ntap-20230831-0003/
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.9
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=1c1bcf2d3ea061613119b534f57507c377df20f9
- https://security.netapp.com/advisory/ntap-20230831-0003/