CVE-2023-38430

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2023-07-18

Last modified

2024-08-02

Weaknesses

CWE-125

Affected products

• Linux Kernel (Linux)
• H300s (Netapp)
• H410s (Netapp)
• H500s (Netapp)
• H700s (Netapp)
• Hci Management Node (Netapp)

References

• https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.9
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=1c1bcf2d3ea061613119b534f575…
• https://security.netapp.com/advisory/ntap-20230831-0003/