CVE-2023-32257

ADVISORY - nist

Summary

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

EPSS Score⁠: 0.00084 (0.250)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-362⁠

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-667⁠

Improper Locking

ADVISORY - redhat

CWE-362⁠

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-667⁠

Improper Locking

Impacted images

Advisories

NIST

CREATED

2 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2023-32257⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CWE-362⁠CWE-667⁠

CVSS SCORE

8.1high

Debian

CREATED

2 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2023-32257⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

2 years ago

UPDATED

7 months ago

ADVISORY IDCVE-2023-32257⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.1medium

Red Hat

CREATED

3 years ago

UPDATED

9 months ago

ADVISORY IDCVE-2023-32257⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CWE-362⁠CWE-667⁠

CVSS SCORE

8.1high

Photon

CREATED

1 year ago

UPDATED

2 months ago

ADVISORY ID

CVE-2023-32257

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.1high