CVE-2023-32246
published 2025-08-16CVE-2023-32246: In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcu_barrier() in ksmbd_server_exit() racy issue is triggered the bug by racing…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.17%
6.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcu_barrier() in ksmbd_server_exit()
racy issue is triggered the bug by racing between closing a connection
and rmmod. In ksmbd, rcu_barrier() is not called at module unload time,
so nothing prevents ksmbd from getting unloaded while it still has RCU
callbacks pending. It leads to trigger unintended execution of kernel
code locally and use to defeat protections such as Kernel Lockdown
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < c053e389db0d892e2ff5a60ec5e533b976503795 | c053e389db0d892e2ff5a60ec5e533b976503795 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < b80422474ffe44cb5e813cd6da1f1c6bc50fd9d2 | b80422474ffe44cb5e813cd6da1f1c6bc50fd9d2 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < d4174505016a3b2996eb7ff1530dcabbf15d47b6 | d4174505016a3b2996eb7ff1530dcabbf15d47b6 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 5a7090ccc242ab009ee7769e9d7fad6644dbe9bd | 5a7090ccc242ab009ee7769e9d7fad6644dbe9bd |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < eb307d09fe15844fdaebeb8cc8c9b9e925430aa5 | eb307d09fe15844fdaebeb8cc8c9b9e925430aa5 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 5.15 < 5.15.111 | 5.15.111 |
| linux | linux_kernel | >= 5.16 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 6.2 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3 < 6.3.2 | 6.3.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ksmbd: call rcu_barrier() in ksmbd_server_exit()
vendor_redhat·2025-08-16·CVSS 5.5
CVE-2023-32246 [MEDIUM] kernel: ksmbd: call rcu_barrier() in ksmbd_server_exit()
kernel: ksmbd: call rcu_barrier() in ksmbd_server_exit()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcu_barrier() in ksmbd_server_exit()
racy issue is triggered the bug by racing between closing a connection
and rmmod. In ksmbd, rcu_barrier() is not called at module unload time,
so nothing prevents ksmbd from getting unloaded while it still has RCU
callbacks pending. It leads to trigger unintended execution of kernel
code locally and use to defeat protections such as Kernel Lockdown
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat
Debian
CVE-2023-32246: linux - In the Linux kernel, the following vulnerability has been resolved: ksmbd: call...
vendor_debian·2023·CVSS 5.5
CVE-2023-32246 [MEDIUM] CVE-2023-32246: linux - In the Linux kernel, the following vulnerability has been resolved: ksmbd: call...
In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcu_barrier() in ksmbd_server_exit() racy issue is triggered the bug by racing between closing a connection and rmmod. In ksmbd, rcu_barrier() is not called at module unload time, so nothing prevents ksmbd from getting unloaded while it still has RCU callbacks pending. It leads to trigger unintended execution of kernel code locally and use to defeat protections such as Kernel Lockdown
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
OSV
CVE-2023-32246: In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcu_barrier() in ksmbd_server_exit() racy issue is triggered the bug b
osv·2025-08-16·CVSS 5.5
CVE-2023-32246 [MEDIUM] CVE-2023-32246: In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcu_barrier() in ksmbd_server_exit() racy issue is triggered the bug b
In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcu_barrier() in ksmbd_server_exit() racy issue is triggered the bug by racing between closing a connection and rmmod. In ksmbd, rcu_barrier() is not called at module unload time, so nothing prevents ksmbd from getting unloaded while it still has RCU callbacks pending. It leads to trigger unintended execution of kernel code locally and use to defeat protections such as Kernel Lockdown
GHSA
GHSA-75h4-6q93-6c34: In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcu_barrier() in ksmbd_server_exit()
racy issue is triggered the bug
ghsa_unreviewed·2025-08-16
CVE-2023-32246 [MEDIUM] GHSA-75h4-6q93-6c34: In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcu_barrier() in ksmbd_server_exit()
racy issue is triggered the bug
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcu_barrier() in ksmbd_server_exit()
racy issue is triggered the bug by racing between closing a connection
and rmmod. In ksmbd, rcu_barrier() is not called at module unload time,
so nothing prevents ksmbd from getting unloaded while it still has RCU
callbacks pending. It leads to trigger unintended execution of kernel
code locally and use to defeat protections such as Kernel Lockdown
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/5a7090ccc242ab009ee7769e9d7fad6644dbe9bdhttps://git.kernel.org/stable/c/b80422474ffe44cb5e813cd6da1f1c6bc50fd9d2https://git.kernel.org/stable/c/c053e389db0d892e2ff5a60ec5e533b976503795https://git.kernel.org/stable/c/d4174505016a3b2996eb7ff1530dcabbf15d47b6https://git.kernel.org/stable/c/eb307d09fe15844fdaebeb8cc8c9b9e925430aa5
2025-08-16
Published