CVE-2023-52441

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

State: Published
Severity: 9.1 Critical
Published: Feb 21, 2024
Updated: Aug 15, 2026
Reserved: Feb 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_neg is set to false. This patch ignore smb1 packets after ->need_neg is set to false.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	51a8534c0f35c0401e45f1055f914729cad98bf9 to before 5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40bAffected 0b3ec5671ac06829ccebdaeec05acedfec327f42 to before 330d900620dfc9893011d725b3620cd2ee0bc2bcAffected 39b291b86b5988bf8753c3874d5c773399d09b96 to before aa669ef229ae8dd779da9caa24e254964545895fAffected 39b291b86b5988bf8753c3874d5c773399d09b96 to before 536bb492d39bb6c080c92f31e8a55fe9934f452bAffected cc32cd98a0aee4cc3eb611cbce11795b1aaa738aAffected 5.15.105 to before 5.15.145Affected 6.1.22 to before 6.1.53Affected 6.2.9 to before 6.3Affected
LinuxLinux	6.3Affected before 6.3Not affected 5.15.145 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

51a8534c0f35c0401e45f1055f914729cad98bf9 to before 5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40bAffected
0b3ec5671ac06829ccebdaeec05acedfec327f42 to before 330d900620dfc9893011d725b3620cd2ee0bc2bcAffected
39b291b86b5988bf8753c3874d5c773399d09b96 to before aa669ef229ae8dd779da9caa24e254964545895fAffected
39b291b86b5988bf8753c3874d5c773399d09b96 to before 536bb492d39bb6c080c92f31e8a55fe9934f452bAffected
cc32cd98a0aee4cc3eb611cbce11795b1aaa738aAffected
5.15.105 to before 5.15.145Affected
6.1.22 to before 6.1.53Affected
6.2.9 to before 6.3Affected

LinuxLinux

6.3Affected
before 6.3Not affected
5.15.145 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.