CVE-2023-32255CWE-772

Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type

Medium · published August 2, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00497 · 41.7th percentile
Weakness
CWE-772 · Missing Release of Resource after Effective Lifetime
Published
2025-08-02T22:25Z
EPSS history
Timeline
  • 02 AUG 22:25Z
    Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type
    cvelistv5