CVE-2023-32258

HIGH

Linux Kernel >=5.15 <5.15.145 - Remote Code Execution via SMB2_LOGOFF and SMB2_CLOSE Command Processing

Title source: llm
STIX 2.1

Description

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

References (4)

Core 4
Core References
Patch, Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-CAN-20796/
Third Party Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-32258
Issue Tracking, Patch, Third Party Advisory issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2219809

Scores

CVSS v3 8.1
EPSS 0.0011
EPSS Percentile 28.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-667 CWE-362
Status published
Products (5)
linux/linux_kernel 5.15 - 5.15.145
netapp/h300s
netapp/h410s
netapp/h500s
netapp/h700s
Published Jul 24, 2023
Tracked Since Feb 18, 2026