Description
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.
References (4)
Core 4
Core References
Third Party Advisory
https://security.netapp.com/advisory/ntap-20231221-0006/
Mailing List, Patch
https://www.spinics.net/lists/stable-commits/msg303065.html
Third Party Advisory vdb-entry
x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-1194
Issue Tracking, Third Party Advisory issue-tracking
x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2154176
Scores
CVSS v3
7.1
EPSS
0.0009
EPSS Percentile
24.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Details
CWE
CWE-125
CWE-416
Status
published
Products (3)
fedoraproject/fedora
37
linux/linux_kernel
6.4 rc1 (5 CPE variants)
linux/linux_kernel
5.15 - 5.15.145
Published
Nov 03, 2023
Tracked Since
Feb 18, 2026