CVE-2023-38430 — Out-of-bounds Read in Kernel

CWE-125 — Out-of-bounds Read12 documents7 sources
Severity
9.1CRITICALNVD
EPSS
0.1%
top 77.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Linux Kernel
Timeline
PublishedJul 18
Latest updateApr 16

Description

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages2 packages

▶NVDlinux/linux_kernel5.15 — 5.15.145+2
▶Debianlinux/linux_kernel< 6.1.37-1+2

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

3
OSV
CVE-2023-38430: An issue was discovered in the Linux kernel before 6↗2023-07-18
▶
GHSA
GHSA-w684-j4f7-xfm9: An issue was discovered in the Linux kernel before 6↗2023-07-18
▶
CVEList
CVE-2023-38430: An issue was discovered in the Linux kernel before 6↗2023-07-17
▶

📋Vendor Advisories

8
Ubuntu
Linux kernel (AWS) vulnerabilities↗2024-04-16
▶
Ubuntu
Linux kernel vulnerabilities↗2024-04-09
▶
Ubuntu
Linux kernel (StarFive) vulnerabilities↗2023-11-28
▶
Ubuntu
Linux kernel vulnerabilities↗2023-10-31
▶
Ubuntu
Linux kernel (NVIDIA) vulnerabilities↗2023-10-31
▶