CVE-2023-52440

HIGH

Linux Kernel 5.17.0-6.1.52 - Buffer Overflow in ksmbd_decode_ntlmssp_auth_blob

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-52440. PoCs published by BitsByWill.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2023-52440, targeting a vulnerability in the Linux kernel's KSMBD module. The exploit includes a Python script and a build environment setup for testing the vulnerability on a custom kernel configuration.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey from client.

Exploits (1)

nomisec WORKING POC 52 stars
by BitsByWill · poc
https://github.com/BitsByWill/ksmbd-n-day

This repository contains a proof-of-concept exploit for CVE-2023-52440, targeting a vulnerability in the Linux kernel's KSMBD module. The exploit includes a Python script and a build environment setup for testing the vulnerability on a custom kernel configuration.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: Linux Kernel KSMBD (6.1.45)
No auth needed
Prerequisites: Custom kernel build environment · KSMBD module enabled · Network access to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Scores

CVSS v3 7.8
EPSS 0.3669
EPSS Percentile 98.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-119
Status published
Products (13)
Linux/Linux < 5.15
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 30fd6521b2fbd9b767e438e31945e5ea3e3a2fba
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 4b081ce0d830b684fdf967abc3696d1261387254
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - bd554ed4fdc3d38404a1c43d428432577573e809
Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - ecd7e1c562cb08e41957fcd4b0e404de5ab38e20
Linux/Linux 5.15
Linux/Linux 5.15.145 - 5.15.*
Linux/Linux 6.1.52 - 6.1.*
Linux/Linux 6.4.15 - 6.4.*
... and 3 more
Published Feb 21, 2024
Tracked Since Feb 18, 2026