CVE-2023-32254

CRITICAL

9.8

Descripcion

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado7/10/2023

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

linux:linux_kernelnetapp:h300snetapp:h410snetapp:h500snetapp:h700snetapp:hci_management_node

Debilidades (CWE)

CWE-362CWE-362

Referencias

https://access.redhat.com/security/cve/CVE-2023-32254(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2191658(secalert@redhat.com)

https://security.netapp.com/advisory/ntap-20230824-0004/(secalert@redhat.com)

https://www.zerodayinitiative.com/advisories/ZDI-23-702/(secalert@redhat.com)

https://access.redhat.com/security/cve/CVE-2023-32254(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=2191658(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20230824-0004/(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-23-702/(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.