CVE-2023-32249

CVE-2023-32249

Critical · published August 16, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: not allow guest user on multichannel

This patch return STATUS_NOT_SUPPORTED if binding session is guest.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Published
2025-08-16T18:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.1125.15.112
linux/linux_kernel≥ 5.16, < 6.1.286.1.28
linux/linux_kernel≥ 6.2, < 6.2.156.2.15
linux/linux_kernel≥ 6.3, < 6.3.26.3.2
References (5)
https://git.kernel.org/stable/c/088131b7b01099720a528a72005ff17868705d40 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1f0490586544455e5be698be2e6c30077b4ec461 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4a98e859c4673013385a54084e0cd865695ca072 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ed76d3a8910be06cd4e4ba63bf6075bf903945a1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 AUG 13:25Z
    ksmbd: not allow guest user on multichannel
    cvelistv5