CVE-2023-52755

ksmbd: fix slab out of bounds write in smb_inherit_dacl()

State: Published
Severity: 9.8 Critical
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix slab out of bounds write in smb_inherit_dacl()

slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before aaf0a07d60887d6c36fc46a24de0083744f07819Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 8387c94d73ec66eb597c7a23a8d9eadf64bfbafaAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 09d9d8b40a3338193619c14ed4dc040f4f119e70Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 712e01f32e577e7e48ab0adb5fe550646a3d93cbAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before eebff19acaa35820cb09ce2ccb3d21bee2156ffbAffected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before aaf0a07d60887d6c36fc46a24de0083744f07819Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 8387c94d73ec66eb597c7a23a8d9eadf64bfbafaAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 09d9d8b40a3338193619c14ed4dc040f4f119e70Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 712e01f32e577e7e48ab0adb5fe550646a3d93cbAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before eebff19acaa35820cb09ce2ccb3d21bee2156ffbAffected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.