CVE-2023-32257

HIGH

Linux Kernel >=5.15 <5.15.145 - Remote Code Execution via SMB2 Session Handling Race Condition

Title source: llm
STIX 2.1

Description

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

References (4)

Core 4
Core References
Patch, Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-CAN-20596/
Third Party Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-32257
Issue Tracking, Patch, Third Party Advisory issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2219806

Scores

CVSS v3 8.1
EPSS 0.0012
EPSS Percentile 30.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-667 CWE-362
Status published
Products (6)
linux/linux_kernel 5.15 - 5.15.145
netapp/h300s
netapp/h410s
netapp/h500s
netapp/h700s
netapp/solidfire_\&_hci_storage_node
Published Jul 24, 2023
Tracked Since Feb 18, 2026