CVE-2023-39179CWE-125

Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability

High · published November 18, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01110 · 65.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-11-18T09:51Z
EPSS history
Timeline
  • 18 NOV 09:51Z
    Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability
    cvelistv5