Linux Kernel up to 6.3 ksmbd race condition

Summaryinfo

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.3. This affects an unknown part of the component ksmbd. Executing a manipulation can lead to race condition. This vulnerability is registered as CVE-2023-32258. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as very critical was found in Linux Kernel up to 6.3 (Operating System). This vulnerability affects an unknown part of the component ksmbd. The manipulation with an unknown input leads to a race condition vulnerability. The CWE definition for the vulnerability is CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

The weakness was published 05/18/2023. The advisory is available at zerodayinitiative.com. This vulnerability was named CVE-2023-32258 since 05/05/2023. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $5k-$25k at the moment (estimation calculated on 08/22/2024).

As 0-day the estimated underground price was around $25k-$100k.

Upgrading to version 6.4-rc1 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch abcc506a9a71976a8b4c9bf3ee6efd13229c1e19 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 6.0
• 6.1
• 6.2
• 6.3

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion