Remote code execution in Linux kernel SMB support

1) Buffer overflow

EUVDB-ID: #VU88283

Risk: Medium

CVSSv3.1: 7 [CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52434

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the smb2_parse_contexts() function when parsing SMB packets. A remote user can send specially crafted SMB traffic to the affected system, trigger memory corruption and execute arbitrary code.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Linux kernel: All versions

External links

http://git.kernel.org/stable/c/17a0f64cc02d4972e21c733d9f21d1c512963afa
http://git.kernel.org/stable/c/af1689a9b7701d9907dfc84d2a4b57c4bc907144
http://git.kernel.org/stable/c/1ae3c59355dc9882e09c020afe8ffbd895ad0f29
http://git.kernel.org/stable/c/13fb0fc4917621f3dfa285a27eaf7151d770b5e5
http://git.kernel.org/stable/c/890bc4fac3c0973a49cac35f634579bebba7fe48

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.