CVE-2023-54250

N/A

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: avoid out of bounds access in decode_preauth_ctxt() Confirm that the accessed pneg_ctxt->HashAlgorithms address sits within the SMB request boundary; deassemble_neg_contexts() only checks that the eight byte smb2_neg_context header + (client controlled) DataLength are within the packet boundary, which is insufficient. Checking for sizeof(struct smb2_preauth_neg_context) is overkill given that the type currently assumes SMB311_SALT_SIZE bytes of trailing Salt.

Details CVE

Score CVSS v3.1N/A

Publie12/30/2025

Derniere modification12/31/2025

Sourcenvd

Observations honeypot0

References

https://git.kernel.org/stable/c/39f5b4b313b445c980a2a295bed28228c29228ed(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/a2f6ded41bec1d3be643c80a5eb97f1680309001(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/e7067a446264a7514fa1cfaa4052cdb6803bc6a2(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/f02edb9debbd36f44efa7567031485892c7df60d(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.